Static task
static1
Behavioral task
behavioral1
Sample
e9172f2bd3644b5af39901cccb8f4f2f_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e9172f2bd3644b5af39901cccb8f4f2f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e9172f2bd3644b5af39901cccb8f4f2f_JaffaCakes118
-
Size
314KB
-
MD5
e9172f2bd3644b5af39901cccb8f4f2f
-
SHA1
2ad62a1d5536fdcb167cd359fc407c436d711aa7
-
SHA256
63d690be3d1b2ae144e35c847e001477b9fb0c7f8ffd2677538a3fab894b4a49
-
SHA512
0cc3c47abb2a440fa8473555110c677a487f7c271745ba2e337e096881468ca8ed879bbdf96c614c7d8aad47cc20138e2c0ab02f0f36f3cb6ff7a1f6570c4017
-
SSDEEP
3072:ZWUElmXkJr4Dul8kZyLA93qlUD2mvwV6bFcHSRoodGv8Z3WKvLMgNdAWcmgZbJSg:qogNJHWeuKwv4U6L7NrM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9172f2bd3644b5af39901cccb8f4f2f_JaffaCakes118
Files
-
e9172f2bd3644b5af39901cccb8f4f2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.xtvb Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.mcex Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.cyphg Size: 512B - Virtual size: 8KB