Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_9249e079e690f7368f35e72ead12f8bd.exe
Resource
win10ltsc2021-20241211-en
General
-
Target
JaffaCakes118_9249e079e690f7368f35e72ead12f8bd
-
Size
625KB
-
MD5
9249e079e690f7368f35e72ead12f8bd
-
SHA1
1c454bee42bd628d33ca3c7084607e189592071e
-
SHA256
8dbd29ed8c36099508bbeb90855efd7c10047f80b04c2708a1359338b5d432b1
-
SHA512
c7e29d4592eeaddad6d26ada22accddce5d7e74b11fb04553e42128f7007722473e599a347368c89dff0c9dc085f6b8cd44677ffb6a6a8a8a17262c9fa0f6b85
-
SSDEEP
12288:aezvEBCTMB6UBqeZQpe16iOCL7GisZP7r9r/+ppppppppppppppppppppppppppx:aezsjBOCL7f21q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_9249e079e690f7368f35e72ead12f8bd
Files
-
JaffaCakes118_9249e079e690f7368f35e72ead12f8bd.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 412KB - Virtual size: 412KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ