Static task
static1
Behavioral task
behavioral1
Sample
e1996be6a5b1044421da4cb9d7b4b93c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1996be6a5b1044421da4cb9d7b4b93c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1996be6a5b1044421da4cb9d7b4b93c_JaffaCakes118
-
Size
360KB
-
MD5
e1996be6a5b1044421da4cb9d7b4b93c
-
SHA1
280a00a5c6bea8bfc77a73d88ef6f7602cd7fa28
-
SHA256
4acb00e43df44d5d0b581738cde89771db56007a145ec7bd41655eef4a3358e7
-
SHA512
5e942e8a95a15bab38a6e869fae2136d0206595d1434f678b662d2876e07cc5ae7c9626ebf8c6c8dd1398d557c480cfc6337f6ed1aa44aafd99f68da59cce1ce
-
SSDEEP
6144:buHPxppyzmBlX5yXmV2fkeNcEEPT9IkZtp8prazJccCVAH8M:wP5GI32fkeSEMIkLapu1cCHp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1996be6a5b1044421da4cb9d7b4b93c_JaffaCakes118
Files
-
e1996be6a5b1044421da4cb9d7b4b93c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 348KB - Virtual size: 347KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ