Static task
static1
Behavioral task
behavioral1
Sample
e7696824a8457723f5126f9c7ed505b3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e7696824a8457723f5126f9c7ed505b3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e7696824a8457723f5126f9c7ed505b3_JaffaCakes118
-
Size
94KB
-
MD5
e7696824a8457723f5126f9c7ed505b3
-
SHA1
73e39ac36e02b9e23814e4b2d48c616be28df49f
-
SHA256
640e9d5d8dba6f55ce85e881b4d2e2899dc8d08033141233374ec10cbc95675c
-
SHA512
5f38d0b65e09111795bc458ea2fbf4d1f1caead5a86adc41bb98c0c42ca3ac80b45d72b8485e39e718ff12d17dad0ccd48e363d09ecfb6492445328ea35a651e
-
SSDEEP
1536:5NgQVdycg49U27+1rvlA+EcW09PBUlUSfPvRqTquSf/BxZ5vQiAW2eyex5d+73gi:56QVdOGf7YJlXRGrfBqTbyB5vhN2eyQW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7696824a8457723f5126f9c7ed505b3_JaffaCakes118
Files
-
e7696824a8457723f5126f9c7ed505b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE