Static task
static1
Behavioral task
behavioral1
Sample
e8b5f962857bf30cab66b37cbfd63d67_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8b5f962857bf30cab66b37cbfd63d67_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e8b5f962857bf30cab66b37cbfd63d67_JaffaCakes118
-
Size
66KB
-
MD5
e8b5f962857bf30cab66b37cbfd63d67
-
SHA1
b6db9d23e03ad6b621215af89d919ec35ee56f40
-
SHA256
a30757bd2db432269d1e6bea4b245d844f47927cc3b518c49fbde88114ff7392
-
SHA512
aa0df3f2c5e1c652c09dc37ba662d3683a83c1bb165a92121627fd82d9ad4799c2ea88d98d719ee7a1e32f1252dd6df3754f7ab6cb5f15ca65a5860bcbd6369e
-
SSDEEP
1536:5D5jrFhfmoJB0huFJwSWvPv706m80ccozSQSXcVT8fJ7Y4U:5D1rffmu0hqSSAPD06m80cbzsM9+U/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8b5f962857bf30cab66b37cbfd63d67_JaffaCakes118
Files
-
e8b5f962857bf30cab66b37cbfd63d67_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
!B���5�Q Size: - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
%��'��i Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��%���� Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE