Static task
static1
Behavioral task
behavioral1
Sample
e877238a31312feb3c8e6bdb82f400d8_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e877238a31312feb3c8e6bdb82f400d8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e877238a31312feb3c8e6bdb82f400d8_JaffaCakes118
-
Size
1.6MB
-
MD5
e877238a31312feb3c8e6bdb82f400d8
-
SHA1
c87d08fee3d16c19a7cb5f8dd7836612d3c43243
-
SHA256
bf14fa769b9398998856aae0fa4b0967ac29093cbea1555c1fad4aaf26613853
-
SHA512
271595692c173f209ac53e28ec5895d3a77f99b4bc37dcfdf6e06d11039f2e83214fa541a317c21b5a3c15647686c06f55fd9f7d397dbe1f6a5ea20f35657bcd
-
SSDEEP
49152:qAqJAWV7lSVrzynM86qSWKmfL8Dm+Q26tMc:qAqXJlszyiqlYZQ2O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e877238a31312feb3c8e6bdb82f400d8_JaffaCakes118
Files
-
e877238a31312feb3c8e6bdb82f400d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 1.4MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 214KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ