Static task
static1
Behavioral task
behavioral1
Sample
e280fbea3b976234a5cbc3b6981b4350_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e280fbea3b976234a5cbc3b6981b4350_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e280fbea3b976234a5cbc3b6981b4350_JaffaCakes118
-
Size
52KB
-
MD5
e280fbea3b976234a5cbc3b6981b4350
-
SHA1
ae17a7eb98c54211939b677849d297b6876fbedf
-
SHA256
2727f880056e4ad7743f71a5f2d3058973e1b3408d133ed3c7aab779051782f8
-
SHA512
e0c8a2e6f68765343010c1916c1cee84a7b027841102af401f97b39b8e25634fdd9a2c82fe0c07e4bfb2dd5e7638cc976a488967b98da98f68f440b8d2e13c10
-
SSDEEP
768:DgiTuh47f1pYVvaJ24ZFBoafXQLUEuYsaEAZDAsCsWZXO4F9fQrqSebKntQ1ArYY:OW7LYk8YXQLU/YseZhCsWhOqSIKVrYY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e280fbea3b976234a5cbc3b6981b4350_JaffaCakes118
Files
-
e280fbea3b976234a5cbc3b6981b4350_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE