Static task
static1
Behavioral task
behavioral1
Sample
6913d027ae8600244f3f1c6f3ab59afe_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
6913d027ae8600244f3f1c6f3ab59afe_JaffaCakes118
-
Size
632KB
-
MD5
6913d027ae8600244f3f1c6f3ab59afe
-
SHA1
93558a00ff3b7c2d4e00e0c7069cf429493b9d64
-
SHA256
8b033bc4ebf5b32f9a4a03e3d743fbc781af36552ebf14e4d0aa9e4e50759880
-
SHA512
96da537708d3af54a91a7ecb6e78db9c0bbbd81997d1c4de2e2af3ec97ba8a43baacddf1d1f82595b8addf195f12985f75c1d51b2fe609ee29c87cc20ef7ad41
-
SSDEEP
12288:OD4VHfQe6ZyWshg+qbZxTZZWunAWvkAvQdBq10af3NAZu9rTDRdWSYTEu3NAUke7:OD4VHfQe6ZyWshg+qbZxTZZWunAWvtvr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6913d027ae8600244f3f1c6f3ab59afe_JaffaCakes118
Files
-
6913d027ae8600244f3f1c6f3ab59afe_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 625KB - Virtual size: 624KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ