Static task
static1
Behavioral task
behavioral1
Sample
e2a456ecb0e48069dea630c1200d3a9c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e2a456ecb0e48069dea630c1200d3a9c_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
e2a456ecb0e48069dea630c1200d3a9c_JaffaCakes118
-
Size
26KB
-
MD5
e2a456ecb0e48069dea630c1200d3a9c
-
SHA1
3bf29e06c5439bd678523f514813838e3e20dae4
-
SHA256
57c2f59382ecd76dd2ce7f60b0bb405bbfaee2337d906e182c31201ea40874a9
-
SHA512
26a91c09e1aaaa063f15fc9b5bf283964ee0209893214ac3ec296c297b4c8125ed9a6a0e9a93ff818ab1f65d985a7f968b425ecae0eb8578c9cb4bef9e638293
-
SSDEEP
384:3FH6Wh7No+pqgUZdzhcjQquaMrAVqwHAXHjS+HNdRGJwLOZMeZKpMcKv/tL86C7x:3VT3Bq7ZtijQh8dHoSkBLOZezYBCSC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2a456ecb0e48069dea630c1200d3a9c_JaffaCakes118
Files
-
e2a456ecb0e48069dea630c1200d3a9c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�<��/�' Size: - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
@�͐��� Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ