Static task
static1
Behavioral task
behavioral1
Sample
e2b9d5569bccdec69f139bcf153e509b_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
e2b9d5569bccdec69f139bcf153e509b_JaffaCakes118
-
Size
36KB
-
MD5
e2b9d5569bccdec69f139bcf153e509b
-
SHA1
902b0725dc505477623377f9bc479af4ad49e602
-
SHA256
1348cf56f8cd61c3461446f966112788983ecc3abe87a9bf58947f3997006868
-
SHA512
41a9001c57a48a4bb5bb2f623d5fab540798d57d7f4e25523ce5055206d273e9b3c5c84998f39dff626975485f8f2e1fdedde3f66353171b32f779559fbe3347
-
SSDEEP
384:egfSxrVqc+cq11FmybHhkeZs5W5UQA++k8K6lbz59NpK/F5Akby9gwpx:NfEJJ+cq11FmybBk4alF9mRgx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2b9d5569bccdec69f139bcf153e509b_JaffaCakes118
Files
-
e2b9d5569bccdec69f139bcf153e509b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ