Static task
static1
Behavioral task
behavioral1
Sample
3667642dbd2ed4f103292dd8944fc719_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3667642dbd2ed4f103292dd8944fc719_JaffaCakes118
-
Size
422KB
-
MD5
3667642dbd2ed4f103292dd8944fc719
-
SHA1
54316089a0d981867f12d4ac551173cfde17233f
-
SHA256
5647b223088d5f7055db455ce7c82de9a1f762126af37635e29b7ef84963ebf5
-
SHA512
6858d1eeb7d9482029c06308a29bd512135bb7d20bad8e999c28ccb7a5544a50c6b9a619d338542dbb5371209a407ba948fc6dec1cdec3ab922c5af06180ca1b
-
SSDEEP
6144:Mvvu5zBxMQssziYWZTZ6ZSd2e2efswGaEXEdr10SH8+pOD4tyraO:OyiYWN408efsDaE0drS+OD4Ar
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 3667642dbd2ed4f103292dd8944fc719_JaffaCakes118
Files
-
3667642dbd2ed4f103292dd8944fc719_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 420KB - Virtual size: 419KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ