Static task
static1
Behavioral task
behavioral1
Sample
e84969379dd9b7359c9a03b1e25249da_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e84969379dd9b7359c9a03b1e25249da_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e84969379dd9b7359c9a03b1e25249da_JaffaCakes118
-
Size
44KB
-
MD5
e84969379dd9b7359c9a03b1e25249da
-
SHA1
d87bd2f7e324685b102f576c75ed85f4f67b7717
-
SHA256
b52fcfa89d74286f0c497678276db75a814aace957d5d013708f864c2b0d698a
-
SHA512
52e9d45ba05ba42ab5f2b87b37da4c49753ab43d1e85ca2ed51851ef032abfcbcda276a25007b6750992859c07a03f3f1f584aee2620d061ca6dceae67a07ab9
-
SSDEEP
768:UhwP3FyDD3jNBc6oMNcm1V6QGduH4jzokETPcbsvwnol9D88888888888JXJ:0wP1yDDzzc6oMN31kUH4j8kETaVoIJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e84969379dd9b7359c9a03b1e25249da_JaffaCakes118
Files
-
e84969379dd9b7359c9a03b1e25249da_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 26KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE