Static task
static1
Behavioral task
behavioral1
Sample
17a00e54d0b35ab036c2e762106fad08_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
17a00e54d0b35ab036c2e762106fad08_JaffaCakes118
-
Size
542KB
-
MD5
17a00e54d0b35ab036c2e762106fad08
-
SHA1
4d29e8315b4b7e10373f5a2667165b10d1bbdd39
-
SHA256
d3287fa834e176bdcc641f75e856ce158b022b0d77776f9fea37ef91b5c442ee
-
SHA512
8886ddcb1ed598f6f561aba124daf2f6d5846c18f76568962a33cce4fc1063abcb01365f20ceb12398c91435d5d6b895451ef653d7a3f0213e05f6dc85bb3610
-
SSDEEP
6144:GZ7O/lGq3TYyDeBRNLg7gKKKvJ3k5K71XRcVSy8r2pRHKMqVPDfuPUllmlZ2ZMU:QjYTYyafmcKBvJ3uKxiVHFbHSpDmUll
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 17a00e54d0b35ab036c2e762106fad08_JaffaCakes118
Files
-
17a00e54d0b35ab036c2e762106fad08_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 440KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ