Static task
static1
Behavioral task
behavioral1
Sample
e80670f07b43b6c064d16ee646001275_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e80670f07b43b6c064d16ee646001275_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e80670f07b43b6c064d16ee646001275_JaffaCakes118
-
Size
687KB
-
MD5
e80670f07b43b6c064d16ee646001275
-
SHA1
d85073d1fe90c032bc6002abd25844039ef3f345
-
SHA256
dc3505cd8098f35242da8137367f172dd5ccc1174e11f7455d286c71fc2a6515
-
SHA512
1cd093c651617c42e0e7da83f7fa099621f633913269ebc849b6a6fa368e6b0c28ee8c42b4a2d3ac341843cf559f7e753197169698a61f180b96113b4cbced7d
-
SSDEEP
12288:aX/xJ9fLXYV4FjXEN6C92EqI+RmDbXF3Z4mxxXZRKowmNvW:aX/5YS7EN6CAI+0HQmXXbn+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e80670f07b43b6c064d16ee646001275_JaffaCakes118
Files
-
e80670f07b43b6c064d16ee646001275_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 371KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE