Static task
static1
Behavioral task
behavioral1
Sample
fa4de225fa3b2930bcbfcad0c614d43a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fa4de225fa3b2930bcbfcad0c614d43a_JaffaCakes118
-
Size
60KB
-
MD5
fa4de225fa3b2930bcbfcad0c614d43a
-
SHA1
4927c39f16a2e453794dba75269ee2db2e37101a
-
SHA256
d7467a18bd84a9a5a605d76a0ac8bdf0251ee1005b859fbfa94463387ae4aede
-
SHA512
1e32857f1247a3564b14742f59bdfd2e067153caad102e8373318232379ef545e992751d69b4b6d1d08b4f4eb5123e655286871eb858cfeabb01f9da1e35c546
-
SSDEEP
768:uQ7/0Jbru7zkHKCbU99HUaxL7IMhqjS+uJKayLo9:u2/Kru7iU99HUaxLkMhqjSfJKaO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa4de225fa3b2930bcbfcad0c614d43a_JaffaCakes118
Files
-
fa4de225fa3b2930bcbfcad0c614d43a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ