Static task
static1
Behavioral task
behavioral1
Sample
f5ecb278bbbe32d9746360817e7c06c6_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f5ecb278bbbe32d9746360817e7c06c6_JaffaCakes118
-
Size
344KB
-
MD5
f5ecb278bbbe32d9746360817e7c06c6
-
SHA1
b81c930deb70110528e1609668285957d0ecc06d
-
SHA256
c5251e43e077eb176dc37f20fedef7af52c35cf22a2723b7589dc590ea144259
-
SHA512
eb833bed79b8754ea8d9dd7646a32f342821df3962e3cfbb2f19eab56a75a89f66c873643854b671dab2b07ce1030cb17903c453dda7413e85b8ccb0b03b5449
-
SSDEEP
6144:s4HgSUooD7fDE867vXaWgvkoXZL8GaY4900NuiF1D489nO:eSU3D7fOTXa7PXZI4r0t9n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5ecb278bbbe32d9746360817e7c06c6_JaffaCakes118
Files
-
f5ecb278bbbe32d9746360817e7c06c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 343KB - Virtual size: 343KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ