Static task
static1
Behavioral task
behavioral1
Sample
e85396d0c56def91fbe3a8595559d872_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e85396d0c56def91fbe3a8595559d872_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
e85396d0c56def91fbe3a8595559d872_JaffaCakes118
-
Size
13KB
-
MD5
e85396d0c56def91fbe3a8595559d872
-
SHA1
d7b3331414e9139aed3d763c82f578b11e7897f9
-
SHA256
3e7e2f1886e2cc9f718dd749397ec42577025001fb9779d37d56d8bc557ec4fc
-
SHA512
44fbdfbaf17a3f3f658f3744fb084b2ff2e97a56518cebe67375b6b99dc884048ccb9edb26678832dbcff31b245f81a13f5ef43675e9a2376525e6a56c185d55
-
SSDEEP
192:5fUGbN1ucJuGW3l0vdV+q75a1nOGKXIKFg5srZ8ditmRWkQ+e:9HbXJi2vDr5aQLg5iQAkW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e85396d0c56def91fbe3a8595559d872_JaffaCakes118
Files
-
e85396d0c56def91fbe3a8595559d872_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�j�0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�j�1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�j�2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE