Static task
static1
Behavioral task
behavioral1
Sample
e275ac01db6163be5805cf40db11b46d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e275ac01db6163be5805cf40db11b46d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e275ac01db6163be5805cf40db11b46d_JaffaCakes118
-
Size
188KB
-
MD5
e275ac01db6163be5805cf40db11b46d
-
SHA1
e8f8bc905bc532117ce9011ac73ea54d8dc8076c
-
SHA256
e91bec44d939b0c12c5478851a9d58202e2f632f03e46bad007c5358c376ad49
-
SHA512
922197d6095e37e7a71cb8faa2ff0e3fe1cf18e4f245f1e4e121ded79747f2a227ab15c8ce4a224096679b56d8c9f679437fef089cd8d15a4a790eedbee521f6
-
SSDEEP
3072:vJjyzlvLMSezcWKdsdh0DOgGO9X2uZkIIC63vYz+R0b2Zt/KD3X5zmnwYYFLdTfm:vtyzNLjeYvedh0DfdjmIICrz7b+KD5jq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e275ac01db6163be5805cf40db11b46d_JaffaCakes118
Files
-
e275ac01db6163be5805cf40db11b46d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 387KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE