Static task
static1
Behavioral task
behavioral1
Sample
e85513089452796adb5c17b6114127f3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e85513089452796adb5c17b6114127f3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e85513089452796adb5c17b6114127f3_JaffaCakes118
-
Size
3.7MB
-
MD5
e85513089452796adb5c17b6114127f3
-
SHA1
cd12a692c1a7758d6c6a545af26de99f22e22c3a
-
SHA256
4dae8db6b9eb161d651c7aa6ed5b9b5e2ed74044c585cd18b5a6d4acc8d2e415
-
SHA512
e188c0968c3cdf0d52e526a8bf1713fb802aff70a4f62d9c33c857960d9555c3cfe4250000570bd60a545829686c27435e3213268e912ea3070682d30851aa77
-
SSDEEP
98304:/4IoOtV7KcTZSlBoISsjweZx8O1NcO9+lv53rwyr:/4ObKnHy2wetncr9r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e85513089452796adb5c17b6114127f3_JaffaCakes118
Files
-
e85513089452796adb5c17b6114127f3_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 632B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ