Static task
static1
Behavioral task
behavioral1
Sample
e779bdeac6f12cf046e3a06147e0495c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e779bdeac6f12cf046e3a06147e0495c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e779bdeac6f12cf046e3a06147e0495c_JaffaCakes118
-
Size
7.2MB
-
MD5
e779bdeac6f12cf046e3a06147e0495c
-
SHA1
2082edb82a90ae1419fca42d9aaf1a17bdd21ff2
-
SHA256
043860e830abb1a28c4c5d8d22cfa41f4b6b11e34d4efbf96ec923e12df480c5
-
SHA512
2a1f2cd78d544c923ee35da4eca2a0153a729a1bab5cff03076c13a2e369c86707cff4f8c63a0a109827b29274235339edcdca5cc7c4816fa6b4323e94bb7e8a
-
SSDEEP
196608:vglxVxsJ0krQEucnAD8Mvqe/hEHa3Rnn6dsn:olxVlCKpvxE6Bnn6dw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e779bdeac6f12cf046e3a06147e0495c_JaffaCakes118
Files
-
e779bdeac6f12cf046e3a06147e0495c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ