Static task
static1
Behavioral task
behavioral1
Sample
e8c17ad6c4223410950c6937146fd028_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8c17ad6c4223410950c6937146fd028_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e8c17ad6c4223410950c6937146fd028_JaffaCakes118
-
Size
176KB
-
MD5
e8c17ad6c4223410950c6937146fd028
-
SHA1
049f8616b4d30b1377836b79fda88f365902506d
-
SHA256
af69e1bc87f677aeeb31fcdbdd782ed1057b0e0c0c72ff747e3bd74a375d6d58
-
SHA512
55877e770f7ea7d9bb75ff9614d1a3406fbcc752fd0ecc5fb1c0e896e62eb46493688de496a45a3dd8bca0069c3249731cff67db794f4d22908a42f862293bed
-
SSDEEP
3072:PO5bXgAZ4+2Q7glYe+34otoNQN1Ay9Q1ITvLdmwY9wdZ+kV2m4Ssb4LLIFaLu/l:ArgAm+2Qf4Bny0IjLdmLuZ+0zVLcl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8c17ad6c4223410950c6937146fd028_JaffaCakes118
Files
-
e8c17ad6c4223410950c6937146fd028_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jnjjqn Size: 1KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 516.0MB
.rdata Size: 155KB - Virtual size: 156KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE