Static task
static1
Behavioral task
behavioral1
Sample
1fbff46d0b659b0ddf5af64ce0886a60_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
1fbff46d0b659b0ddf5af64ce0886a60_JaffaCakes118
-
Size
740KB
-
MD5
1fbff46d0b659b0ddf5af64ce0886a60
-
SHA1
4d2f337ea22e0a21a39748339e668475e4758ca1
-
SHA256
55ecfe3756290aa2130836b547dc6b3fa0dd3405900ea940c6b30da89889d010
-
SHA512
c86dfea9a18273021d01e0e875ab9c14393aa7f660c321cc0009b08594cbdb65063f837e295e264c0e9bbd8867d513f1893c12337bbb21c3b0300896355adf12
-
SSDEEP
12288:sxVhAiHeMJORYCQ0mTnrxSceYVXy9wM3uCBcurrv6nnjqKoe:ShF+cORYCQLrxSvYYwM3uCBcu/6nnjqo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 1fbff46d0b659b0ddf5af64ce0886a60_JaffaCakes118
Files
-
1fbff46d0b659b0ddf5af64ce0886a60_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 519KB - Virtual size: 518KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ