Static task
static1
Behavioral task
behavioral1
Sample
5aea56156ab7da5161f1d14261e77bd5_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
5aea56156ab7da5161f1d14261e77bd5_JaffaCakes118
-
Size
1.1MB
-
MD5
5aea56156ab7da5161f1d14261e77bd5
-
SHA1
709050c574a9426c3058e216ff04538fe7b0488e
-
SHA256
0c1296c11ed22130856eb97d47c8339936e92012fa7a9922b51ea14ecb9d8f64
-
SHA512
ca642d6c9883e13dddd7565170480ae1dbe2f5fbcf11a41fe0b3ad299db955ac27707427bfdf3c76fbb4527010f83dc7339b24bb2f64d64cb389dc383445ae4b
-
SSDEEP
24576:UV63UYgSZUX6dsgw83xUJjGXT3pcXRKY59Z1nRZI:VUWPjMZK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5aea56156ab7da5161f1d14261e77bd5_JaffaCakes118
Files
-
5aea56156ab7da5161f1d14261e77bd5_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ