Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4be62c517aaeeeea6be46074ada57f3d.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_4be62c517aaeeeea6be46074ada57f3d
-
Size
472KB
-
MD5
4be62c517aaeeeea6be46074ada57f3d
-
SHA1
53ef51da1d354813c888a7b3bfa351c41df79fc0
-
SHA256
8822bed3681dbd01193a6321804af11d5853c109ec9273f5da299ede4fbd5f69
-
SHA512
91bee051059502756cbf1519b86e596e908d45d7fada2763bb4df770ef7247ef12c549eca098b0c777929dab5423e0d04808ed240ea28952ff1aab954f73ed74
-
SSDEEP
6144:dS9TXI1h8feSMalVL/TQ+/BN+ltmyVcn3qkkemnRFqLIUyeLF49uGcEVe1R:Q9Yh8feT0BpYl3kakRmRfmxQuDEV0R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_4be62c517aaeeeea6be46074ada57f3d
Files
-
JaffaCakes118_4be62c517aaeeeea6be46074ada57f3d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 311KB - Virtual size: 311KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ