Static task
static1
Behavioral task
behavioral1
Sample
9c75a48f5d740cc3efc84d89a83ee050_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
9c75a48f5d740cc3efc84d89a83ee050_JaffaCakes118
-
Size
710KB
-
MD5
9c75a48f5d740cc3efc84d89a83ee050
-
SHA1
c589c7813398d1286292087a7525b4e441d78216
-
SHA256
105988fa4ea105ef4d25131faa63c56df3b6b9294a5e7c2e09ea5d6990b99fe9
-
SHA512
974c5b6232a0ced575f856c0f9ec76e4a6e663f57509a1b2130f942d84b61f1bdb96ef49544bdfbddc08f6e6e765f1d51ef96f79d93d4e9609dd606f03885851
-
SSDEEP
12288:a7KQsRFS7dBOgfKxJAoxRYUUFAc0RUzVBAvRj3chpn6mDwhT6NFqKY9JXt9bZ88r:dQs6rFS3lxZCiyzDdp6mDwhT6NFqKi9V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9c75a48f5d740cc3efc84d89a83ee050_JaffaCakes118
Files
-
9c75a48f5d740cc3efc84d89a83ee050_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 674KB - Virtual size: 673KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ