Static task
static1
Behavioral task
behavioral1
Sample
f42e394da602e24e0caf22cc16b9a587_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f42e394da602e24e0caf22cc16b9a587_JaffaCakes118
-
Size
880KB
-
MD5
f42e394da602e24e0caf22cc16b9a587
-
SHA1
6d8c11fa74903f18b6a222464a9f1a40f50dc347
-
SHA256
dd8f89aefc7df0cae92af60345a0f467ef1ec14decc73ae24b355408fc8ad78b
-
SHA512
295bca27e74a41e0a59a2ee6c3575fde18f59a655df888b9345a5db11702f6993273b4a93c6c6261bc42c7a5652655c9a6b4dbfab4822cae6c23081284d8fca7
-
SSDEEP
12288:BnMQQ6h7qT0zX8uMEptG+jvmSUdLDb6kaiEmfuAiweutmDFSxO4aP7chD9MMGbxo:BMDP/eAcU+oOutmZSIv7chD9MMGbxZe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f42e394da602e24e0caf22cc16b9a587_JaffaCakes118
Files
-
f42e394da602e24e0caf22cc16b9a587_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 875KB - Virtual size: 875KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ