Static task
static1
Behavioral task
behavioral1
Sample
e1274782496bbd5ebc84c3f04b9f3696_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e1274782496bbd5ebc84c3f04b9f3696_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1274782496bbd5ebc84c3f04b9f3696_JaffaCakes118
-
Size
452KB
-
MD5
e1274782496bbd5ebc84c3f04b9f3696
-
SHA1
a5875d76d776620575c27f44ab7615df829b35e0
-
SHA256
a28bbfd51daf460d9f1e3349f965be29a2d9c5217ac866d87ad98667073bd2ac
-
SHA512
87b522524e0b167dfb604e5726f9e479a465501523eefe24f228054750342cee916cd48cb5729f4bb5963331885ffb22400a6976ca681b91e4baf0d53ac3b80a
-
SSDEEP
6144:15A+1rIOZyoYtlprNFQUjiQlJfE1YDNkUBOlcs3pvh6Q7PU0CbqdE5bngjj/3:Lbc5JF3OQL6ISUBOlcmvh63Hbf5g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1274782496bbd5ebc84c3f04b9f3696_JaffaCakes118
Files
-
e1274782496bbd5ebc84c3f04b9f3696_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 440KB - Virtual size: 437KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ