Static task
static1
Behavioral task
behavioral1
Sample
e932df3f32e18cca7dc5fa2e99558d38_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e932df3f32e18cca7dc5fa2e99558d38_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e932df3f32e18cca7dc5fa2e99558d38_JaffaCakes118
-
Size
756KB
-
MD5
e932df3f32e18cca7dc5fa2e99558d38
-
SHA1
0a572934e5cee66657b967499bb062cc8401308c
-
SHA256
ba3bdf137b0c3c090ba8f7659bfdd676a4bdd4f2d4db4ecb3a941d7e266d9f93
-
SHA512
46c41eb7abf25552c7e081b881cef4ae18c4758378be0dbf5c4e7b2b2953105e0280a294c1004e0f059dc184cf5b212793a648c96063400c3e86b4ab2143e52e
-
SSDEEP
6144:Eu/BxEadWHWOn5rZOiTl6XnU2KOhXfqm5rEc+tCId9cmcerf1hNau6xp3O482laj:lbQHWAlZd+1VoCI/3XrhX6n3u5foe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e932df3f32e18cca7dc5fa2e99558d38_JaffaCakes118
Files
-
e932df3f32e18cca7dc5fa2e99558d38_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 754KB - Virtual size: 753KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ