Static task
static1
Behavioral task
behavioral1
Sample
efba2f0fef43c9d866b89e8757e898bd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efba2f0fef43c9d866b89e8757e898bd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efba2f0fef43c9d866b89e8757e898bd_JaffaCakes118
-
Size
583KB
-
MD5
efba2f0fef43c9d866b89e8757e898bd
-
SHA1
e10321ce870752b5a630c56461dc630a6b69a246
-
SHA256
2ca4f8006b5eddcbf87895299660f90ff6bad708c5b4b5be93d4d430288216f1
-
SHA512
dd36c21438e6c32e4104e30bf44e0462dab0fe598cb8e21576eca193758e3d04465f7f96d9d557f19a42306a2f1b49252899ea6aa42e7252df330054ed80e5d7
-
SSDEEP
6144:iVL0nt7DmqF7f3WuBJweg1jtblBdrUGTHLR4XKKKMjDXXSR+AauJMwL0d:cuvf3WuBJylfXt4Xjjg+A6G0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efba2f0fef43c9d866b89e8757e898bd_JaffaCakes118
Files
-
efba2f0fef43c9d866b89e8757e898bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 580KB - Virtual size: 580KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ