Static task
static1
Behavioral task
behavioral1
Sample
e815a2f137e36f7f96f7558a762bdcea_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e815a2f137e36f7f96f7558a762bdcea_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e815a2f137e36f7f96f7558a762bdcea_JaffaCakes118
-
Size
1.7MB
-
MD5
e815a2f137e36f7f96f7558a762bdcea
-
SHA1
a4e68724b0d96c599f82cb6f212833d228078347
-
SHA256
e6cc064adf817b056391cefc9650050faa666d134c1b1fa0d73f9dd7494ec908
-
SHA512
21e0f1d1dfd81de5c26f6409fe59b2d8a209f1aa832210862273b5a16a820f137d1ed168b3fc32aee096fc1c677414143f0ed426770d119539a6ad77e7ec6939
-
SSDEEP
24576:PLx9bHf2iqn0z5GX7IDoNgDmuWhWZG9oOQ1vLeEh3S2NzDUHoELtUJ1K:zxuU0yPBNDUHoW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e815a2f137e36f7f96f7558a762bdcea_JaffaCakes118
Files
-
e815a2f137e36f7f96f7558a762bdcea_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 663KB - Virtual size: 662KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 967KB - Virtual size: 967KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ