Static task
static1
Behavioral task
behavioral1
Sample
873de7055a13ff974becb96df17c794d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
873de7055a13ff974becb96df17c794d_JaffaCakes118
-
Size
1.2MB
-
MD5
873de7055a13ff974becb96df17c794d
-
SHA1
33510f7c3b5b46a7728318f70bedb8ac38c4f41e
-
SHA256
f906013f06983cb53b50c8fc99057d88a2ba18e89b601224a738a059ed508f36
-
SHA512
824b29502c978b24a867d92a43aa030c4f773c1a0ff36f6ee6c9ec2f7d8d8bc7ffb4dc1a4ae31e7438177aeed0f1f958e0c36713d09a20722dc8fa578b8b0214
-
SSDEEP
12288:cRU5FD7S4NmkTSZ7GPFV/jtaFnAF5hl4DVGNNO4xJUVhfBncZPRhQdpueonditqD:LuyUsxj0nE4hAMfe+pOndinet
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 873de7055a13ff974becb96df17c794d_JaffaCakes118
Files
-
873de7055a13ff974becb96df17c794d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 557KB - Virtual size: 557KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ