Static task
static1
Behavioral task
behavioral1
Sample
e52aefae051cf2ccb0a5167f934fb962_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e52aefae051cf2ccb0a5167f934fb962_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e52aefae051cf2ccb0a5167f934fb962_JaffaCakes118
-
Size
709KB
-
MD5
e52aefae051cf2ccb0a5167f934fb962
-
SHA1
90b4a3591719e45bf10fcccab82071147811a996
-
SHA256
d66e6332874f85b47e9d2aa3c2b27d91a4bd42546e7e0ed2ccaf3556bc8130aa
-
SHA512
5b5f9301802c1c15aa07a21557697cf1f4eb2d471e2883e42874e7bcbe0228539fec022e2f17084d14e408c26429f4769a117f79dfc00fd994550d299fbfb174
-
SSDEEP
12288:BcWfHK7zhBtrf+7XcY8EouJRJANGogetMMhT28RQNgEwJCElkM:lCFBtr1Y8EouJRJAGPqMwRQNg3I+kM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource e52aefae051cf2ccb0a5167f934fb962_JaffaCakes118
Files
-
e52aefae051cf2ccb0a5167f934fb962_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 704KB - Virtual size: 703KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ