Static task
static1
Behavioral task
behavioral1
Sample
d0fca93ddb58e75e8b9593955182176e_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
d0fca93ddb58e75e8b9593955182176e_JaffaCakes118
-
Size
548KB
-
MD5
d0fca93ddb58e75e8b9593955182176e
-
SHA1
363d540930e327a365a665ad25a01ec2171dcbf9
-
SHA256
cbd275fc64689591d403dfa551f4f6864d957360c1f9d1343675619fe069bd62
-
SHA512
4a8035e019b41e17903acf43adfcf086722ee350861db3afa4b10a33fc4faee38aa0e9e92f09608ae54aa7138ddc242cd0e36c39d6e547732dc1c9ceb2a3d3d5
-
SSDEEP
12288:Y0Siiu2cOMayaZerXXmhFXjE4twENCgz9HfHu4V/:+3gV6eihBP4E19/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0fca93ddb58e75e8b9593955182176e_JaffaCakes118
Files
-
d0fca93ddb58e75e8b9593955182176e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 532KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ