Static task
static1
Behavioral task
behavioral1
Sample
edc0e8278847950c9a26993fbb6ec9be_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
edc0e8278847950c9a26993fbb6ec9be_JaffaCakes118
-
Size
583KB
-
MD5
edc0e8278847950c9a26993fbb6ec9be
-
SHA1
cc71f96a2c4a73f03810330011fc0a7141b19e89
-
SHA256
64516bb0c2f2bd3506396274c4fdc4683bf517a26ab20e041a862302fb4294a4
-
SHA512
8e3879fa8b3ec44b4ede2a801e1699bd40459ce26e931a945a57a5590da674d8fc6d7c8db0c7331ddcbcfcdc7b45365575e006f62724cfb2ab9c1e833badbd69
-
SSDEEP
12288:i4cPU9nPU9au5Kkzni+4nuP3OsBgo0q4wMkawtpVd75TFnsYZpJCov0:i4AHJP3OsBgo0q4wMnwj73sEphs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edc0e8278847950c9a26993fbb6ec9be_JaffaCakes118
Files
-
edc0e8278847950c9a26993fbb6ec9be_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 580KB - Virtual size: 579KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ