Static task
static1
Behavioral task
behavioral1
Sample
d3501c217e6168565167ab4df2c2e1e6_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d3501c217e6168565167ab4df2c2e1e6_JaffaCakes118
-
Size
70KB
-
MD5
d3501c217e6168565167ab4df2c2e1e6
-
SHA1
925f6727b1e54f03232557633ad5f1f86cff51c3
-
SHA256
e6f2fb615fff28db7ce596bbf614b0ae4dd2c8a0812b0b6370d64fda27b26103
-
SHA512
2f1ed9501204c83ecbe7695848cedb1f6b8dba835d36115029c06077b1e41b0a9a6cacbe022a7f17a14914753d11ceaa61703890c40b7ee48f90e1e76878054c
-
SSDEEP
1536:L4gg1oddecOSw1DrXt6njCA6rgLlHBkVY9SoQg65Tt:L4gg1oddecOSYvd6n+A6CHkY9xQf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d3501c217e6168565167ab4df2c2e1e6_JaffaCakes118
Files
-
d3501c217e6168565167ab4df2c2e1e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ