Static task
static1
Behavioral task
behavioral1
Sample
e06cf376be7d3ea2e8f2c426cd09229a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e06cf376be7d3ea2e8f2c426cd09229a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e06cf376be7d3ea2e8f2c426cd09229a_JaffaCakes118
-
Size
491KB
-
MD5
e06cf376be7d3ea2e8f2c426cd09229a
-
SHA1
2668cf4a181e47135a1be75b08e6b5108277230e
-
SHA256
a312d4e7c74e5d5baca4d788d024064ea7551076b2de57f813d31c29c7d8f629
-
SHA512
bce0e45aac4b88d54b69e92831e1a25e84923d26705481ecb6cfbe2ec48b8a42a9abd28adb258d8b9909bd68836cdd57434c078cc9a7596de5c266a0d518f7d6
-
SSDEEP
6144:uKDMAYloj1/L8YEAQwgG5h8Df+1IbPP9z3nkeDrxbcJ2ZLkAOXSeiouM1RFOGsY:uKDMAzjN4YEAF+Dm2xw41gDhi61/C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e06cf376be7d3ea2e8f2c426cd09229a_JaffaCakes118
Files
-
e06cf376be7d3ea2e8f2c426cd09229a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 488KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ