Static task
static1
Behavioral task
behavioral1
Sample
e844d38aeec5cc69619fe9ee04f419b7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e844d38aeec5cc69619fe9ee04f419b7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e844d38aeec5cc69619fe9ee04f419b7_JaffaCakes118
-
Size
25KB
-
MD5
e844d38aeec5cc69619fe9ee04f419b7
-
SHA1
2faf81123a8051ea5c84ccfc4c057d5700d63a07
-
SHA256
b79c05c4eec83372d7384a7d7039ff12f3fe6fd953d6f4ed62bd45cc1806b669
-
SHA512
426228c4fc4727e9634a839c4933599f51bb54a28e3be9acab3c0ff1130f2db127ce0bc86ccacd8bc9bca4552d66bdb1c2fa9fd6138bbaa8ed2f04ec9dcae536
-
SSDEEP
384:9bXYqpWTeHitolB5aDwx1ATuadXEfnQEfLrvERTPUne+RVPqe8p0BJKsvJ:9bXY64wNjATuadkQEzLooFCe8paJRJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e844d38aeec5cc69619fe9ee04f419b7_JaffaCakes118
Files
-
e844d38aeec5cc69619fe9ee04f419b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
b7aa5ad21fef535197ce43d189c00604
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
DeleteAtom
Sections
���Z[28 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�e�B� Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
O�s�8� Size: - Virtual size: 121B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
z4߽�KZ� Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�e�F��� Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cm'l��mh Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ