Static task
static1
Behavioral task
behavioral1
Sample
cce85c20b904b48ecce56f1e969dcf80_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
cce85c20b904b48ecce56f1e969dcf80_JaffaCakes118
-
Size
725KB
-
MD5
cce85c20b904b48ecce56f1e969dcf80
-
SHA1
1a6d9a342ba4f259b3a14523d139b39c87091bac
-
SHA256
2d1bdf894e558865433c1c8c288887fb9fd0604c0ffc82fe7b623637043c733e
-
SHA512
51e450f60c9c15bb8e2a9497ed735ed94d5451a767bf4659d9adcd650c8a6a52283b6e2b9355e99765ecff62bd6b38cf441c8b65aa97693a82e68ac84b3f0831
-
SSDEEP
6144:8pRY0JvIB0GMJAqgYJ91P4oV9yplVZNynvq8MBryjgJS9RXZkCr/lNHhKM/QQ8:Gtxk0eqz1Pn9ynVSn0B2jOylNHhKi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource cce85c20b904b48ecce56f1e969dcf80_JaffaCakes118
Files
-
cce85c20b904b48ecce56f1e969dcf80_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
wC=)dH Size: 324KB - Virtual size: 323KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ