Static task
static1
Behavioral task
behavioral1
Sample
e811ebf294386c20ee59b27d306518bd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e811ebf294386c20ee59b27d306518bd_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e811ebf294386c20ee59b27d306518bd_JaffaCakes118
-
Size
158KB
-
MD5
e811ebf294386c20ee59b27d306518bd
-
SHA1
74dd2ed42b1e8e4180b55263f2f2e6dc26586972
-
SHA256
65d7612ce3a464f2d3be04eb2712c704d6b1614cc959e9ffaee7dcee6e6461db
-
SHA512
4acacd3d75510921582832aceaa94b177e119d8f6694e28210de3d829505772b6a95df5f0a79bae7dcaf9de088bfff79707c43df1d4c3fa08cbe82aea61d2d63
-
SSDEEP
3072:6hLh5JgbXgAZ4+2Q7glYe+34otFAIhbOzYXSmR5Ek8m/5Mzf0TCdbg38S:6hLCrgAm+2Qf4kVO0R5//5Mwmdbg3n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e811ebf294386c20ee59b27d306518bd_JaffaCakes118
Files
-
e811ebf294386c20ee59b27d306518bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.mwugnp Size: 1KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.j42yvj Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wxilu2 Size: - Virtual size: 405KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 818.0MB
.rdata Size: 156KB - Virtual size: 160KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE