Behavioral task
behavioral1
Sample
f46d4d69952033b127fcc6498f1966ed_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f46d4d69952033b127fcc6498f1966ed_JaffaCakes118
-
Size
1.1MB
-
MD5
f46d4d69952033b127fcc6498f1966ed
-
SHA1
765b11a26a2919d7412bff81e67fcc2243353307
-
SHA256
3fa06f354865cd3215c5c8d02e3f00e4492252ceccf2101f223029a669ba694f
-
SHA512
4f5a2d60f5dafe53954be6021462040f47381e8f82382e784eacd59d45aa2593ec66a8780f9f6f2b7f426dfea6c0b0e2facab0b2793bc3a516752468a677ec6b
-
SSDEEP
12288:QTEYAsROAsrt/uxduo1jB0Y96qd8kMOC5nDWjVXjg0Lzs6fAlF+F7+AFa5Ngu9ag:QwT7rC6qd8OBjVXLzsoAPsyr5N8Js
Malware Config
Signatures
Files
-
f46d4d69952033b127fcc6498f1966ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.eter0 Size: 441KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.eter1 Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ