Static task
static1
Behavioral task
behavioral1
Sample
ea1376209e8560be36d79d1272bf0e76_JaffaCakes118.exe
Resource
win7-20240319-en
General
-
Target
ea1376209e8560be36d79d1272bf0e76_JaffaCakes118
-
Size
2.2MB
-
MD5
ea1376209e8560be36d79d1272bf0e76
-
SHA1
1d02fb9ef45ef007159bf40e82eb8a2575d980cf
-
SHA256
76d332b6e7871c530bb0386be776bf1186010e87e4f0cbf75aac198b60f3e3f6
-
SHA512
1b4c44e9c5a8e032e12502a2e40c6d8fe3254eede52ccc0a553734c2186b982480507af9b37c63498d4efe767437dfac4a16c0c41ab4c23e18fab0300d9b4715
-
SSDEEP
49152:2cSj3XQ7F34XH+Ym0Ktg8nNjXv2O/rx+loL8CqTcD0mgRI:2c6w7F34X+YtKBnNhr7djrgR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea1376209e8560be36d79d1272bf0e76_JaffaCakes118
Files
-
ea1376209e8560be36d79d1272bf0e76_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ