Static task
static1
Behavioral task
behavioral1
Sample
d3fe2d675588e62712f826100988862a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3fe2d675588e62712f826100988862a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3fe2d675588e62712f826100988862a_JaffaCakes118
-
Size
143KB
-
MD5
d3fe2d675588e62712f826100988862a
-
SHA1
170accaa0db553cc2d7a3ef3b2b05451fc306916
-
SHA256
29d445670075f82a3ffc7f5001a7182a97187e069a056f35f6097ed051c48b98
-
SHA512
8ccdba6985b49a9e771c58d470491dc65200a982eb3efabae710a4cac950f7004c15cf2d0adf9b7922e83589331429b65754f91b744c07275b0386d00d26c0a6
-
SSDEEP
768:byqd2cHJeKBeqB/d3DwVKrJLcdIFN+y3C6mTGep2UZEccJAPfTYolQ7eB8pGIy0k:vDCiK8N+yS6mQQSUIXryCSwOqsz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3fe2d675588e62712f826100988862a_JaffaCakes118
Files
-
d3fe2d675588e62712f826100988862a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ