Static task
static1
Behavioral task
behavioral1
Sample
e7b66e06b3cbb0a8cbd2668d5b0ef268_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e7b66e06b3cbb0a8cbd2668d5b0ef268_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e7b66e06b3cbb0a8cbd2668d5b0ef268_JaffaCakes118
-
Size
61KB
-
MD5
e7b66e06b3cbb0a8cbd2668d5b0ef268
-
SHA1
434b10ab077e2757f7d6d176b5a53b80a38b371c
-
SHA256
e5109f8657b7d77404da65dc87c4d52f18b861ab0181a52686fd6feaa6171ab6
-
SHA512
e498dd3d0d5fc64a65d83395d3c867a4e1f030745e4599f5f33d947d708c761d1d79188807a82a8a0dfd7c74f0dc553cda7225e8c8027b41851794396f80cecc
-
SSDEEP
1536:hFJ1whubopasvOlEd2K+RVKzbbZbK2q6T:hbGuEp/GlO2CbZm2q6T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7b66e06b3cbb0a8cbd2668d5b0ef268_JaffaCakes118
Files
-
e7b66e06b3cbb0a8cbd2668d5b0ef268_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 658B - Virtual size: 658B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE