Static task
static1
Behavioral task
behavioral1
Sample
110bd6b5aa4c90a953ab0f3609652998_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
110bd6b5aa4c90a953ab0f3609652998_JaffaCakes118
-
Size
200KB
-
MD5
110bd6b5aa4c90a953ab0f3609652998
-
SHA1
9140e8f26b66712a9045faa1bac5acc5f286025f
-
SHA256
bf0dec72ad159b57d71113a71288db15899bf5a7f3bcc8abc05d8133c61b968f
-
SHA512
c9eb6d50c7c0a16a15d27bf3eff4064cf90f8c093690a1bf7e145ffd77d55899a1e86b8ddec509d4bbf884bbd05be4277befc2ebb5f0a9e3b5983cf58ec261fc
-
SSDEEP
3072:QDomrXsAe9YqcxK5G/RWD0ADvtvaiuq8mcVw:QrsdsCsRWDLDvtG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 110bd6b5aa4c90a953ab0f3609652998_JaffaCakes118
Files
-
110bd6b5aa4c90a953ab0f3609652998_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ