Static task
static1
Behavioral task
behavioral1
Sample
e884c978c7e6e0a983b67d2eb719140e_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e884c978c7e6e0a983b67d2eb719140e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e884c978c7e6e0a983b67d2eb719140e_JaffaCakes118
-
Size
27KB
-
MD5
e884c978c7e6e0a983b67d2eb719140e
-
SHA1
a82d34c7af930c4ca40a3d2c7ac7d6209508eb85
-
SHA256
66faee2de45fa254585b6362c5966c89bde966fb793a8d24228b4e8e7b2c96ec
-
SHA512
2ae59010567efc02333cea8df35dcd2510d73d2524991b4f8270a52b5e390b0a8ce7cf72f69685fdb3bc6f17cb445e341a13192b3a309d4c08298d99ba00bf68
-
SSDEEP
384:XoCgTnlp2is/91FGoW2nuytQGJjx+3Cmm+5PT3k9qx82tfWQ9Ly6Os5OWNma:Xvbl/HF7pnuYQoSCT+5PTdx8sLyVCNV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e884c978c7e6e0a983b67d2eb719140e_JaffaCakes118
Files
-
e884c978c7e6e0a983b67d2eb719140e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 597B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ