Static task
static1
Behavioral task
behavioral1
Sample
db149a6545894fa2bd7854454ef3439e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
db149a6545894fa2bd7854454ef3439e_JaffaCakes118
-
Size
5.3MB
-
MD5
db149a6545894fa2bd7854454ef3439e
-
SHA1
8235442d007358754b209c1fc21970d9dd447b5f
-
SHA256
15bee4a4b124374dd343f70f76e2def21238e4b26950a6ee4439d5c8e0217cb8
-
SHA512
4f44821f9f185c9457072ce6736bf3ac5db0a216ffb69c43423a8ab250be416e9ab21ae3348598651fb8795d6bc852196ce544f514c7c1d479c1c02d5636c154
-
SSDEEP
49152:DJmjd+uThrWGitFI9gpmS5ta/sWBHI+2U:KBHI+D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db149a6545894fa2bd7854454ef3439e_JaffaCakes118
Files
-
db149a6545894fa2bd7854454ef3439e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 357KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ