Static task
static1
Behavioral task
behavioral1
Sample
db44d4b6318ecdbe928756132fd9614d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
db44d4b6318ecdbe928756132fd9614d_JaffaCakes118
-
Size
566KB
-
MD5
db44d4b6318ecdbe928756132fd9614d
-
SHA1
c8749f367e5d97e533ada903b24d14865759e04b
-
SHA256
8ebc5d1724f4429abbf1b29cceb65193c88588f2b20b8dab2ce902504c07edae
-
SHA512
46d66d9601252fb7a487e728a3d6494891d5f41ff54ffd26228739db3f6bd3a15212cad3fbcd421696ddaa5c1f8b7b9e0df7f5956c392d11de203c25ded26834
-
SSDEEP
12288:7fLB4dQPYfRujLnPFWLPCIQZi4zkeAg3JFBvYwV7EEEECWMshf9tmo+7oh8oZuyL:vB4ddRLOvMIuvk2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db44d4b6318ecdbe928756132fd9614d_JaffaCakes118
Files
-
db44d4b6318ecdbe928756132fd9614d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 560KB - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ