Static task
static1
Behavioral task
behavioral1
Sample
e820f8f17b85ecacbc635d52bb532cd0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e820f8f17b85ecacbc635d52bb532cd0_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e820f8f17b85ecacbc635d52bb532cd0_JaffaCakes118
-
Size
28KB
-
MD5
e820f8f17b85ecacbc635d52bb532cd0
-
SHA1
faf61164d79072ad55395946dcb2c551d9de239e
-
SHA256
a5e97d681d45f159927f695d0c0285adb89e6abcd9df8696e38fc7b8cc0ee6bd
-
SHA512
9cb70015f3daed9b0487c69f05cf4d244c47c084a82e29e83c2c59e0352d166ed50847440096dbbcd365a794daf213e16f01bc85b09c5649d4de41a63576cebe
-
SSDEEP
384:/+aVuFan11ScHQ4xwfpXC1pI7GM3KOqOJg+5a/eriZ+E4Dk8lOTv9StlRAsSGWqL:3nSSzQCnImuJnUBoE8k8lOBK7pWOt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e820f8f17b85ecacbc635d52bb532cd0_JaffaCakes118
Files
-
e820f8f17b85ecacbc635d52bb532cd0_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.idata Size: 19KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4PQQL96F Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ