Static task
static1
Behavioral task
behavioral1
Sample
eab38f8ff58dc7df9f27d067754670d7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eab38f8ff58dc7df9f27d067754670d7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eab38f8ff58dc7df9f27d067754670d7_JaffaCakes118
-
Size
636KB
-
MD5
eab38f8ff58dc7df9f27d067754670d7
-
SHA1
4f13c5e746c3b76c233b450ba4c2e5babe041260
-
SHA256
8729cfe97b80703f531d6274f128b4a027ab08903b0ef6bc41c64c45e05e7df7
-
SHA512
b589f6bbd2ea339650aff6c05dfa3b7264fa0335f818863af0e2df93b17c198d358c4e6115afcc23b8b34b9fb8d7a760480e6510b618ea4c62f2538539f65266
-
SSDEEP
12288:woZB7TepbosaV5jTuQzA6VPSrAtQwbafJOMIXlpZVv7GCckZWu+KfsX36j96:woZo7i5uQz9VPEfwbuJOMI19vqChZW3w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eab38f8ff58dc7df9f27d067754670d7_JaffaCakes118
Files
-
eab38f8ff58dc7df9f27d067754670d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 624KB - Virtual size: 621KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ