Static task
static1
Behavioral task
behavioral1
Sample
e7e87c7bae341f922f668963ce6b1ff2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e7e87c7bae341f922f668963ce6b1ff2_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
e7e87c7bae341f922f668963ce6b1ff2_JaffaCakes118
-
Size
1024KB
-
MD5
e7e87c7bae341f922f668963ce6b1ff2
-
SHA1
c21d81305d2ec03b4fe52ddf23dc24351268ac5c
-
SHA256
7c7b0814864e1f05abfc625ad53ff6f226096ceacb02750ccc608478c332764f
-
SHA512
2d600595fb778e16f1f688b718633148eec6334d889ef3d00a5742cd244367351027cacd8ee96605e06bbeb803bd3223813508c39540c3a26c2b6b8429dad7cd
-
SSDEEP
24576:haXqKVVAZWPKtj0rszoUt/9+eiTB800qs84DhtrRKNZ:haaKVVAZWSxWaoUt/9+ek8Isp0NZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e7e87c7bae341f922f668963ce6b1ff2_JaffaCakes118
Files
-
e7e87c7bae341f922f668963ce6b1ff2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE