Static task
static1
Behavioral task
behavioral1
Sample
e01e6c3e29750b92252e3edecda8ca86_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e01e6c3e29750b92252e3edecda8ca86_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e01e6c3e29750b92252e3edecda8ca86_JaffaCakes118
-
Size
100KB
-
MD5
e01e6c3e29750b92252e3edecda8ca86
-
SHA1
832327393e6175551497d2558252d0510e072b5c
-
SHA256
d575d2afc2c553fbb2b1a9dc0289138215e3acf51383f3e5d0d82089342e4c2f
-
SHA512
307b1f203a46a8f754b2d5fdfe0c891f111d884e797b3575d195954f7633007c24161ef6d41a47db58b189e2f688b6d198cb079b795b04fd4e47c741ac2e7bdf
-
SSDEEP
1536:ZGaq93mQy5PV4MSu4M3vfAlA89mWMMF4pzYU2qIUZ6kd+lB:Z5MaVVnLA0WLM0Uvh6kd+lB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e01e6c3e29750b92252e3edecda8ca86_JaffaCakes118
Files
-
e01e6c3e29750b92252e3edecda8ca86_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 80KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 776B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ