Static task
static1
Behavioral task
behavioral1
Sample
fd9dd22e2c75023364b1a64aca1d1552_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fd9dd22e2c75023364b1a64aca1d1552_JaffaCakes118
-
Size
680KB
-
MD5
fd9dd22e2c75023364b1a64aca1d1552
-
SHA1
32ea56c6a9e548b372de7b3c6fac2ed14cd9887f
-
SHA256
49c0e6b4ce12a35dd25868d038a83975c0c336e074d5d41294138e88b87863a2
-
SHA512
e81ae3d8a368e127f8350d347e2eb12b169d6599b33f0d383526c9e1f5c201667afddcca9ec6b13f066af55c0606b43b4c0a8f52111dc5681808c36e4ecf62a0
-
SSDEEP
12288:5GiF3JNaoskuj7XKIFG2rPUmzKdnZUIbI5CZI6FYRX+21C0o81JAUU:5t17PskmKcbUuKdnyIM5oFKc0oS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd9dd22e2c75023364b1a64aca1d1552_JaffaCakes118
Files
-
fd9dd22e2c75023364b1a64aca1d1552_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 668KB - Virtual size: 666KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ