Static task
static1
Behavioral task
behavioral1
Sample
43aa5e8b27546106dd66c0dae83c5f59_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
43aa5e8b27546106dd66c0dae83c5f59_JaffaCakes118
-
Size
1.5MB
-
MD5
43aa5e8b27546106dd66c0dae83c5f59
-
SHA1
c55656ad4fad7217f1a0e71dd9e13102039eff0d
-
SHA256
e3639a291e120d2ac06f722f0da51fd842cea6469339208ef0ec6e7edf84e310
-
SHA512
b212d6a85571d2f9a6dc5f1a276b5d02ca117e075b3c910a0be53c219da0a2b4841a27abb4d04b6e178f93ba5374123161bb9ba7f751e4fc081f800dd156a21f
-
SSDEEP
12288:Oh5E394sjPBi/7Ui9rI9jGoaft/VEMv/ZkkDOEVTQ6H+Uy1Susr8MmH3jr:FKo8UimctdEA/ZkceZZS5R0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 43aa5e8b27546106dd66c0dae83c5f59_JaffaCakes118
Files
-
43aa5e8b27546106dd66c0dae83c5f59_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ