Static task
static1
Behavioral task
behavioral1
Sample
e8858e1faf97bc78bd16948f5d54573a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8858e1faf97bc78bd16948f5d54573a_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
e8858e1faf97bc78bd16948f5d54573a_JaffaCakes118
-
Size
40KB
-
MD5
e8858e1faf97bc78bd16948f5d54573a
-
SHA1
897385e460907b72d65f66fb92590d349bff94ba
-
SHA256
c1b33d1ae94c0d5469e6d617635e4d8ed65a2b07e39f7e8c9327926b7bcc3598
-
SHA512
bb608186277713af52ead3286f984bf538aad779b9f6d08cba003be0762a3ae616cdddec1bd1580fc6a6b6b073afd1999532f964525f517aae6cef3c8f277636
-
SSDEEP
384:g0aai/5G3GkqBblNd3nm/2N2iIZKxqTpmdIEyykjb5X5WVJQm1ueeE7HifBKivCM:g0SR4GJH3m/lNpmZyDZXIJQz5K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8858e1faf97bc78bd16948f5d54573a_JaffaCakes118
Files
-
e8858e1faf97bc78bd16948f5d54573a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE