Static task
static1
Behavioral task
behavioral1
Sample
e86b6b9a0e62c450a426d470567baa74_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e86b6b9a0e62c450a426d470567baa74_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e86b6b9a0e62c450a426d470567baa74_JaffaCakes118
-
Size
73KB
-
MD5
e86b6b9a0e62c450a426d470567baa74
-
SHA1
0177e1e06faf0fa5217400f7569fcd09bc5af344
-
SHA256
83527f7cbfb4591e2ad2aa4e30270ed0d242f53f3d3ce0dfde9adb5cc1ec0eec
-
SHA512
ef9786d83b779f597ba17a0436ff1aa80eaa1c6faef3b2a0b83addab02da5fdb38455a1c1bddc9089b082a7ce72c7717d3599d465438610fc2b9cdc249073931
-
SSDEEP
1536:VYYbVJbhu6aBG6g3baX7tAkhGe2LczMhVzzAZIoQ+0aP6W+:VYYbVEGFaXRAkhGRLEwVzeVQE+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e86b6b9a0e62c450a426d470567baa74_JaffaCakes118
Files
-
e86b6b9a0e62c450a426d470567baa74_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 65KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE