Static task
static1
Behavioral task
behavioral1
Sample
e90323bad456502d56f8c1f6ae3c45f2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e90323bad456502d56f8c1f6ae3c45f2_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
e90323bad456502d56f8c1f6ae3c45f2_JaffaCakes118
-
Size
64KB
-
MD5
e90323bad456502d56f8c1f6ae3c45f2
-
SHA1
dfe6c57914ac0db13d0f5a3b6873c2d633f4cd86
-
SHA256
fe5abc2ad321a98c83d83baaab113a341f2e7bed5c85dd2cf762175c522e76e5
-
SHA512
216624d8f86b9ee6cf039720404ccdfc88c1621a0426e21268d898583caa3cebef123b8bb454bd182aac94986c945a5dcda1e3c8971e3d11363128d108ac6006
-
SSDEEP
1536:/g7wc1aGNC0klI7CPN30d63mng/xjZYxuX0WUUNyl:I7wc1aOCo7C133WnUjZY5myl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e90323bad456502d56f8c1f6ae3c45f2_JaffaCakes118
Files
-
e90323bad456502d56f8c1f6ae3c45f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ