Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_ea132fbed0da2723d47ec17a9576b9bb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_ea132fbed0da2723d47ec17a9576b9bb.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_ea132fbed0da2723d47ec17a9576b9bb
-
Size
474KB
-
MD5
ea132fbed0da2723d47ec17a9576b9bb
-
SHA1
a882706fdde2531a17268ac5bc712d77ec47b5ef
-
SHA256
ee1e67b70efdd4e22c534e9f3575036db9963f9b5ad4a8b0a4d4c26d45fea155
-
SHA512
7a315512e04eb42789985d97904c36f2f337581b2599a14c398e7bbab615eb6d40c00c30b32b9b3c1f426a3ec8b43dab341f50a4c846ba66e6cb9621573ffdc5
-
SSDEEP
12288:J8SIbw8eGrT3jSrmLdyHcrfokLSN0hGbpqJFTP:JEbw8eGrTTjZy8rAoSN0EFq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_ea132fbed0da2723d47ec17a9576b9bb
Files
-
JaffaCakes118_ea132fbed0da2723d47ec17a9576b9bb.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 472KB - Virtual size: 471KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ