Static task
static1
Behavioral task
behavioral1
Sample
ef3ee1a764a33632b5cf8d0b10853d8d_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
ef3ee1a764a33632b5cf8d0b10853d8d_JaffaCakes118
-
Size
1.6MB
-
MD5
ef3ee1a764a33632b5cf8d0b10853d8d
-
SHA1
815dde75d76b1f61ac69cff8edfebed265aa801f
-
SHA256
e91d88bbb3693136fce60e4208200af50f9855a1d4b4e96d164ba7ef8b1e0bda
-
SHA512
abdda3497ceaba4b2b8513fa5344fc4aa631858c26f9b32fc7f10d0d2971b935859acd27d54845cc4c11a8fc7a920d9d52ac21194ef05e125fdd09cedc8246f0
-
SSDEEP
24576:nqLS/d3UYdkb7Mb+8w/qx/YNTSlzPdVsC9+8EUUWbmwRGPoN7vdiTbnFM:NM7Mb+8P/xtUeLEcm/PoiM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef3ee1a764a33632b5cf8d0b10853d8d_JaffaCakes118
Files
-
ef3ee1a764a33632b5cf8d0b10853d8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ