Static task
static1
Behavioral task
behavioral1
Sample
e745f496598f4a421309bea114895853_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e745f496598f4a421309bea114895853_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e745f496598f4a421309bea114895853_JaffaCakes118
-
Size
217KB
-
MD5
e745f496598f4a421309bea114895853
-
SHA1
d92920ac14954fd1eb73fef7a3735a83a0e784ce
-
SHA256
620f156e54d3487e29881fc717a2afc7e308d9131da0386f0e7f36e647171b30
-
SHA512
6df252bc597f85d23e32292d93a4dd21fb0732817c3dd2f993de6053bc6369e69ff929e58f58f4922a60a07dc376220a082bbd4cc7b0126ee6deb9996e0d8273
-
SSDEEP
6144:gKwbCdLG59i9LlSa4Iyk3aIX+jJwisZSNwYUD7tCT5R2:gKMCd+i9LlSZcablwip3UYVY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e745f496598f4a421309bea114895853_JaffaCakes118
Files
-
e745f496598f4a421309bea114895853_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.iota0 Size: - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iota1 Size: 216KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iota2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE