Static task
static1
Behavioral task
behavioral1
Sample
e012e871a15695612515d1578be49d83_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
e012e871a15695612515d1578be49d83_JaffaCakes118
-
Size
141KB
-
MD5
e012e871a15695612515d1578be49d83
-
SHA1
e8b4c6632a133df46713296ca21e87d3f6159107
-
SHA256
ea7d9e9b846e07ee0e1fbfde3d125cc51ee11b4a361cdae630738f59f8acd2c6
-
SHA512
9b1f0858a26055744dff806ca7d266796bf050765cc969b81ca4e81acd914bf67bf6c5f7b4313860dc7c7f33a1b9450afddb30f217d716f4e6f45fe8b4c91800
-
SSDEEP
3072:HsG9XkkFluFTgs5ZfwUVEac1fAGxyVhUZS/ojwx90ZbZAQ:rkgXs5ZIUaac1YPEZSw0x9mZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e012e871a15695612515d1578be49d83_JaffaCakes118
Files
-
e012e871a15695612515d1578be49d83_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ