Static task
static1
Behavioral task
behavioral1
Sample
eba351f128db727db35529d2dce7fd21_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eba351f128db727db35529d2dce7fd21_JaffaCakes118
-
Size
4.3MB
-
MD5
eba351f128db727db35529d2dce7fd21
-
SHA1
c4b39a4cf1e43bf0ff3a085c4219d5b68c8f08aa
-
SHA256
0259c94cec130ded17d65a361f2484be71e4f0f126ddd04ad242f7c4c5a67bd6
-
SHA512
06fc7694f599ad30c617f863a6cc74b71f47bdcafde7310f8c2158c6f234774886b7d287779b939b8c00c93b6050284fa814d693bd79fcfc174a6249f5a6bcce
-
SSDEEP
98304:EYVMw9JLNeLAQQF6aW4zfX4XyaixOa5EpKQC2DrEv:1mwXLoLAXWU4XDaSsgEv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eba351f128db727db35529d2dce7fd21_JaffaCakes118
Files
-
eba351f128db727db35529d2dce7fd21_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 250KB - Virtual size: 249KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ