Static task
static1
Behavioral task
behavioral1
Sample
eb84633a87e291b591e33487a29442f7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb84633a87e291b591e33487a29442f7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb84633a87e291b591e33487a29442f7_JaffaCakes118
-
Size
516KB
-
MD5
eb84633a87e291b591e33487a29442f7
-
SHA1
13dca3a0f737f7be67210fabd42b3c886a8084cf
-
SHA256
5c81de6dc55da91e3fcba3398602dba68ed696d4e17bdbe58ac47655199f2011
-
SHA512
5daa3e30e6e5b482de2bf17eee6c90bc997e28b9599649a3ce4d9b0dcab86a1aeca385f542bd4b398b4b230e1e55e6af4ff8030156268e22758c69a05b389b62
-
SSDEEP
12288:EryqtVkZqVTyA/W+5Ba3uU8p1uh9v48QoYqab1r:Er1tVkZqVTyA/Was3uU8pCZYn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb84633a87e291b591e33487a29442f7_JaffaCakes118
Files
-
eb84633a87e291b591e33487a29442f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 513KB - Virtual size: 513KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ