Static task
static1
Behavioral task
behavioral1
Sample
e8c9d9783169bea338364a278bb655f4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8c9d9783169bea338364a278bb655f4_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e8c9d9783169bea338364a278bb655f4_JaffaCakes118
-
Size
14KB
-
MD5
e8c9d9783169bea338364a278bb655f4
-
SHA1
a302b1f27ddafb20d462e681296af1ec8bdf01bf
-
SHA256
3655ed9776ea2255ec5b3fe9545c7730ff330a9e6221f8188e10b928e198d312
-
SHA512
a752f8e2787334b1808a5bdd40cec2ccae17618ecaa96b3aad519d6b6791ff94b3ca32e9dfbacf8a929001922b7ca07c395e4de4405d0cdf5cfaa5f6150eeaea
-
SSDEEP
384:OWtMWKVbZb7OxeYh2vDJqik1iTf9g1Zi9NfmrIVf:dgFIxJh2TQof9cY9NOIVf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8c9d9783169bea338364a278bb655f4_JaffaCakes118
Files
-
e8c9d9783169bea338364a278bb655f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�50 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�51 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�52 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE