Static task
static1
Behavioral task
behavioral1
Sample
2f7c56725edd95e9583197a7edc6d8d2_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
2f7c56725edd95e9583197a7edc6d8d2_JaffaCakes118
-
Size
91KB
-
MD5
2f7c56725edd95e9583197a7edc6d8d2
-
SHA1
bfd32f963c49656b7ba0a8204e57ed58d8b6cd81
-
SHA256
51ad998f3a847685ef42e7f85f11852d3a90939cb4d7166d7bc002f0ec87fce3
-
SHA512
749c3c05dab9224d8234243fca7fe7b2af814778652b2d3e915b15b2abf6f23064daa3218e47c69af462772c89caa0ea424399bc85d7454175357432f4f7ad29
-
SSDEEP
1536:HTVckhKYIj91aCnBbZ6geIWwYVxf2DfB370lGuKnkbrEgCgqULd6pXGTZcq:HTVckhKJaWbZ6geIWFx253QGuKnkbr7l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2f7c56725edd95e9583197a7edc6d8d2_JaffaCakes118
Files
-
2f7c56725edd95e9583197a7edc6d8d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ