Static task
static1
Behavioral task
behavioral1
Sample
e23061c22745b84ca5e91aff4b7845ba_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
e23061c22745b84ca5e91aff4b7845ba_JaffaCakes118
-
Size
594KB
-
MD5
e23061c22745b84ca5e91aff4b7845ba
-
SHA1
5d60d95ec9da6bdf75b529d552f1adff74eb8984
-
SHA256
c11663b07aa67c29c2ba5a8a52e66eef5c81b0b48ca949bfa83644d53d85ee89
-
SHA512
a2de584f3e8c1b719fcfee0134b14ea028198a835285af1815eee1b8d2c10c307b648572eb7ed26921be046199caec631b0cfe36765332a84c4e0fd255a53917
-
SSDEEP
12288:NqKJSvTV0ing23Bzmvkrcj2KMsrfnu+52xRBWUhKB:NFiTdngUBzXNC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e23061c22745b84ca5e91aff4b7845ba_JaffaCakes118
Files
-
e23061c22745b84ca5e91aff4b7845ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 586KB - Virtual size: 585KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ