Static task
static1
Behavioral task
behavioral1
Sample
ed570d2c1d94014484f8cdb799bb35d8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ed570d2c1d94014484f8cdb799bb35d8_JaffaCakes118
-
Size
309KB
-
MD5
ed570d2c1d94014484f8cdb799bb35d8
-
SHA1
a5042e1d6553b473b46e664f8ec9b25837434727
-
SHA256
a78c238b16524d721ccd95e7c4d5ed60ad8ab105c4dac7c9c764119e57191d30
-
SHA512
7644e39176b0a68f3b0c3788cf328ab5a76a8948318204928afb57a6666b3c73899f29ecb8c14ab6b793bd8fb4de4149e34331bac279bb8ec99f4ed30e1fadb7
-
SSDEEP
6144:3KRVn+4v3O2W8GMJrAzMlBNHFnq4wwILzmUkHVgxb6dq8/BxjH0:O+4PO23nAzmamUkHVg96k6xj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed570d2c1d94014484f8cdb799bb35d8_JaffaCakes118
Files
-
ed570d2c1d94014484f8cdb799bb35d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 307KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ