Static task
static1
Behavioral task
behavioral1
Sample
e9063bfd87924b9e15f72a95b5156da5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9063bfd87924b9e15f72a95b5156da5_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e9063bfd87924b9e15f72a95b5156da5_JaffaCakes118
-
Size
70KB
-
MD5
e9063bfd87924b9e15f72a95b5156da5
-
SHA1
158b6a6f515472fc77a80b013883edc93ee0748e
-
SHA256
8f12e553e9b714a485c3200c26dc5b2a0fc8dfc6617dccbca5c9042d6ff921f0
-
SHA512
8fd4ab4c2a35f26553311c02fdf0a9dd547248341289e15c03dbff5955dd7223805a0faf2b2b13afa028d376704b4fbe9ddb2c0221f3536a8edbed26a4b89310
-
SSDEEP
768:Oybq3GQ/HwCLs75QwL5DNj09OCCcGNJlxPP5jBPny4wt1J8RTv/KkhM:Zbq3GQctjL5RfCC/n5tEyRTvSk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9063bfd87924b9e15f72a95b5156da5_JaffaCakes118
Files
-
e9063bfd87924b9e15f72a95b5156da5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 63KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE