Static task
static1
Behavioral task
behavioral1
Sample
e8a806a4b2c4933d6c13f2174dff06da_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8a806a4b2c4933d6c13f2174dff06da_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
e8a806a4b2c4933d6c13f2174dff06da_JaffaCakes118
-
Size
49KB
-
MD5
e8a806a4b2c4933d6c13f2174dff06da
-
SHA1
08f0e6d5f8cdae2d91044e46b39edc4b47f509c1
-
SHA256
55fb7863407619f01ed1e22ce2faa7d52aba816be0bea4202bfece5eb4fe921e
-
SHA512
df48e50a49d176c03246bbeb51bd27343a8b2136f6ccdc36d3ecae0ea7672155179a375380be473f1b4473060751372393f2b017d1cecda40b64e4a5ecb4646c
-
SSDEEP
768:VOnFdQ/gdO1VhoC6kY2T38YuyE1ew+YWutuB0DrG4lV4DvRJV:Ved8Zo6Y2TsPDPFXGKgl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8a806a4b2c4933d6c13f2174dff06da_JaffaCakes118
Files
-
e8a806a4b2c4933d6c13f2174dff06da_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
WIN0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WIN1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WIN2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE