Static task
static1
Behavioral task
behavioral1
Sample
ea2ded4e1678ca875a80f513f2d61b97_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ea2ded4e1678ca875a80f513f2d61b97_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
ea2ded4e1678ca875a80f513f2d61b97_JaffaCakes118
-
Size
716KB
-
MD5
ea2ded4e1678ca875a80f513f2d61b97
-
SHA1
2c5fc350c2bd35cd6894ff1560c054275faa5a4c
-
SHA256
ddd283c74940f9894783e4c7721765a8241bcbd836f9e17acada8b89622c8697
-
SHA512
1583f8fcead435837f1c9bd424bd0d0debea881968a5abbca805108b7af98db09f08b011712a1fb3a541aaa099db042f8d73914fc6d0fb2d2b961a7710de7931
-
SSDEEP
6144:3q8SG2/r5rQbja+HQGU4/GXUzFd54CpDeUNm9SgvvcpCR:a8CD2bja+HQGr/GkzP5VnNm9SgvvcMR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea2ded4e1678ca875a80f513f2d61b97_JaffaCakes118
Files
-
ea2ded4e1678ca875a80f513f2d61b97_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 704KB - Virtual size: 701KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ