Static task
static1
Behavioral task
behavioral1
Sample
e83a865d3dc0c5cd43acd03e75620485_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e83a865d3dc0c5cd43acd03e75620485_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e83a865d3dc0c5cd43acd03e75620485_JaffaCakes118
-
Size
55KB
-
MD5
e83a865d3dc0c5cd43acd03e75620485
-
SHA1
da0a01f6a6816a0593fc3000845fb4b49d5c1919
-
SHA256
bdd408f7b66e55bd1466935c06e3153081188724c39f7b15f30a63f70ff89965
-
SHA512
7baea7f83f704725ae8e2130d1e28c1a023a47b156a47df1de99dc022c39cb4168b9f238134ea8e9c25e9a56bf767adca206969531bb838dca49433673307996
-
SSDEEP
768:+lvlZt8KHXKIHBmH2UyER5P+4NxCsyO4qnpD+5eetDbfWMctl3+EPUanharaaVaX:4tv3GHBBP+ICMp65TDTctBJb8+5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e83a865d3dc0c5cd43acd03e75620485_JaffaCakes118
Files
-
e83a865d3dc0c5cd43acd03e75620485_JaffaCakes118.exe windows:1 windows x86 arch:x86
1743a5b9816a58c2129527a62802cc12
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
Sections
e�qM$� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
)�Xܗ2 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
L=%��8&0 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ