Static task
static1
Behavioral task
behavioral1
Sample
0eacfb9bb353cbd229a1f6dfae72a554_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0eacfb9bb353cbd229a1f6dfae72a554_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
0eacfb9bb353cbd229a1f6dfae72a554_JaffaCakes118
-
Size
435KB
-
MD5
0eacfb9bb353cbd229a1f6dfae72a554
-
SHA1
620aab3b45726ed88c6f522f579e75de07e01fc4
-
SHA256
e060e475695a6de9068c0e1826b011120347496568a123ac2cc9d25b4dd48774
-
SHA512
429fef3e3b44ea0040c5e94eb1ef6b87cf8310b1a43bac80c86727f98140cb26aa82db1575b6f9adb2e7230ef7da169c6f9d811a20ce6844f67dbc1b2fe06be5
-
SSDEEP
6144:+A2/tPWoJ2vunQ6ZdMj7el7a4BmhsPCV6prXIsJS8uMEGGnlfbSj/bUoPs8:GP70CnKj070WPCgIsJSlMEGolfbv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eacfb9bb353cbd229a1f6dfae72a554_JaffaCakes118
Files
-
0eacfb9bb353cbd229a1f6dfae72a554_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 422KB - Virtual size: 422KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ