Static task
static1
Behavioral task
behavioral1
Sample
e8153d463306198a511c9c0e36f2ed73_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8153d463306198a511c9c0e36f2ed73_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e8153d463306198a511c9c0e36f2ed73_JaffaCakes118
-
Size
184KB
-
MD5
e8153d463306198a511c9c0e36f2ed73
-
SHA1
ac279e353f7a17aadd312c6e1b500e1633d35993
-
SHA256
c4aba4ab71525bcfef275147b8f934fbccaf94296980ca4e8105ef25b0f581de
-
SHA512
57e571327e588fbbcb6481e79e6688c449951b2b71cdab5a34d2d18143f42291ea8119651c1aab5a39668b24636c2adf3780a0a01aed52ed4c9819cbd2e6f85e
-
SSDEEP
3072:JAIrow9EVBA0HOjZdQRPh8FN8q76SfpIQHxFNzv5NlPvyFM:JAYo1u0HqdcPh8V+IzNlPvyF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8153d463306198a511c9c0e36f2ed73_JaffaCakes118
Files
-
e8153d463306198a511c9c0e36f2ed73_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ