Static task
static1
Behavioral task
behavioral1
Sample
59c3fa30d3e9d542695592a1f80e67ad_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
59c3fa30d3e9d542695592a1f80e67ad_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
59c3fa30d3e9d542695592a1f80e67ad_JaffaCakes118
-
Size
709KB
-
MD5
59c3fa30d3e9d542695592a1f80e67ad
-
SHA1
2a65d2e8bdb5e84c42d64e7e67181cfa53554ca0
-
SHA256
d5e88ba5e7751149f6fa84a4d71566c4051b6176095ab0f7e8a4fce6ef6a11ec
-
SHA512
db769c8f4473f91a1b596d90ee6151d7fff0c4d90cbca12cc8d2bc2176441704da4674671f91646e34c4f28d96b33b1c0ccbf594a21314418fa1f30a8a63cbd1
-
SSDEEP
12288:3shOpw7EzATP/8uKONAgon+Ne3b4eo08uTx05Dn+YE1RK84dpE7OU0Z1nSIR3Qc:3shODsTXKONAB+e4e19vY8K8eE7OU0ZU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 59c3fa30d3e9d542695592a1f80e67ad_JaffaCakes118
Files
-
59c3fa30d3e9d542695592a1f80e67ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 610KB - Virtual size: 609KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ