Static task
static1
Behavioral task
behavioral1
Sample
e75a9e97760a2d2f14a02a034e74d6ee_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e75a9e97760a2d2f14a02a034e74d6ee_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e75a9e97760a2d2f14a02a034e74d6ee_JaffaCakes118
-
Size
165KB
-
MD5
e75a9e97760a2d2f14a02a034e74d6ee
-
SHA1
afed40dbe70affc4fcac0fe5b12ded8e838e883b
-
SHA256
42db53fcb1a8764e5e5f42310f421987025ab7ba6624935abe9d58d8079a42f2
-
SHA512
649c8323aaece8dfc4b3eb08c9b31d706d2d2844f7dfcc91b30383c6cff860bd3f68a570f2c09b3e175fb5256c8aa858b59709e3ae7a2e5c0904969d9fb95c0b
-
SSDEEP
3072:RARrArB0ejmHgfcSinz1GXAUFFbJaZxbGHNbANvQwEy91/V+tXnAaPdMgLvSZzYa:d0ejZkSihGF3a3yHNbo1eAaPdMBzZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e75a9e97760a2d2f14a02a034e74d6ee_JaffaCakes118
Files
-
e75a9e97760a2d2f14a02a034e74d6ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ