Static task
static1
Behavioral task
behavioral1
Sample
2e2877fb9ecd8c84a5b1d0b1f33ff57a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e2877fb9ecd8c84a5b1d0b1f33ff57a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2e2877fb9ecd8c84a5b1d0b1f33ff57a_JaffaCakes118
-
Size
132KB
-
MD5
2e2877fb9ecd8c84a5b1d0b1f33ff57a
-
SHA1
182938209d6b6f0ddbd2d36aa22fd2d9c10c2e1e
-
SHA256
d05fef9226476cdc0768dfce85751e474e5d05a47303e0fc23142f45cd91913c
-
SHA512
dfcf8519db350c30437da09c6c829bff51e22d8129e7e173ceee36dfb5c1361d4c2262194eeb956ea6b715cadb7b27436037e8df9ad588371140f80e5cb3b3d6
-
SSDEEP
3072:Hzw9nqy7KFKDPXzoQfCXyvtBi3j3WAgjOAYsz1ZnW:TwRqy7KFKTXzoTivDi3j3WJJX1ZnW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e2877fb9ecd8c84a5b1d0b1f33ff57a_JaffaCakes118
Files
-
2e2877fb9ecd8c84a5b1d0b1f33ff57a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCryptor Size: 49B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCryptor Size: 102B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.!ep Size: 376B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE