Static task
static1
Behavioral task
behavioral1
Sample
c289d919a072411ec467378d6160890e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c289d919a072411ec467378d6160890e_JaffaCakes118
-
Size
381KB
-
MD5
c289d919a072411ec467378d6160890e
-
SHA1
d11d09642404409efe70be1fc2f6e37d000219c7
-
SHA256
f30db11729cf0ce10842f0156b52feff345150c4261b159be49f67b8f7170c85
-
SHA512
3acbd44912f779cfc5b2861bd20e7b8a1eb64991f1c560be5d2f26168ed4db7df739400cc1ac90fd4b06eae5b3898723cabaf4503fcb0d21a39b2f430354c7f9
-
SSDEEP
6144:lEYb6666i66666jl6xaoAA+xLnvotACo6K60EXWFc19aKF9Fo4wFiN1FYqI+YD3P:C80FYjDCyEGFcm4JNDYDdJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c289d919a072411ec467378d6160890e_JaffaCakes118
Files
-
c289d919a072411ec467378d6160890e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ