Static task
static1
Behavioral task
behavioral1
Sample
c8ca6a9423c0c873479cf9a884725497_JaffaCakes118.exe
Resource
win7-20241023-en
General
-
Target
c8ca6a9423c0c873479cf9a884725497_JaffaCakes118
-
Size
863KB
-
MD5
c8ca6a9423c0c873479cf9a884725497
-
SHA1
0860f86752935d3fb49f732a05c5adac7886871a
-
SHA256
639b60ea1b7a45599670bcc009ca98c0dcd5f231f65706b206456fb33e4217d3
-
SHA512
aa9a8b33ccb7fedb6225832b9e6fc2530b3a4e531eb437d2b2111395952f1480e69b1924ea1766f444f52704f8b2bffe9c26ee58e7b7a5c837129d6f529185db
-
SSDEEP
24576:p2KdPp9AR95yvnqPXdxVZ0E8ipPd8caAPVZiyy/:HPpKRyvnqPXz0EfPDVZi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8ca6a9423c0c873479cf9a884725497_JaffaCakes118
Files
-
c8ca6a9423c0c873479cf9a884725497_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 857KB - Virtual size: 857KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ