Static task
static1
Behavioral task
behavioral1
Sample
e7711c7a4f3e568baa828d483aae5ba2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e7711c7a4f3e568baa828d483aae5ba2_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
e7711c7a4f3e568baa828d483aae5ba2_JaffaCakes118
-
Size
149KB
-
MD5
e7711c7a4f3e568baa828d483aae5ba2
-
SHA1
c92dca2e813cac517a8bb8e6d2d2823fc54ee7e2
-
SHA256
b47f581cf970b5ce99aece25dce484979f0370fb9629abf25dc7f83bb3e83dc0
-
SHA512
523f4c4516872379c2eaeaee40fc93874e16bf8cac5ff0b7d2639db8d14d4b20a42032ae2b9c63f10b3c0b0942472c437996307c9d88fb7de99a329f5facaf9c
-
SSDEEP
3072:GLTWYGDaq9gw6LQILT7V7sFgjGoc9CjX+buzSkdhan0a5pmfK:kWYGD0B0IZjGz40uzTfanfpmK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7711c7a4f3e568baa828d483aae5ba2_JaffaCakes118
Files
-
e7711c7a4f3e568baa828d483aae5ba2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Cc�20 Size: - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Cc�21 Size: 149KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Cc�22 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE