Static task
static1
Behavioral task
behavioral1
Sample
e1949c29f97c31cdb6f8a7c01a3da67b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1949c29f97c31cdb6f8a7c01a3da67b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1949c29f97c31cdb6f8a7c01a3da67b_JaffaCakes118
-
Size
7KB
-
MD5
e1949c29f97c31cdb6f8a7c01a3da67b
-
SHA1
52cded7f05dd6f5fb0b2cff7d22df82e4b8d29e2
-
SHA256
388e98d5c2467e34f4bffe8181586a2a5557eedc59897e76c2757e6779dc6ee7
-
SHA512
b4f24d9511b9df7a5e4646b519d42c1d23fc0419c13b02f332dd4b7ac8c27485360c7ff8a417e3ce2135b9f00267a404e10a2d2dc748d1ad2cab1ae39e45d998
-
SSDEEP
96:KgQG6kHWjs89KPVaMWsWrvF5cE2TYlnlYJnLeL0Kff345Ctv1r5RXmm6oajF:KZjs8ILWFwV2nlYJLeLTg4bn6n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1949c29f97c31cdb6f8a7c01a3da67b_JaffaCakes118
Files
-
e1949c29f97c31cdb6f8a7c01a3da67b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ