Static task
static1
Behavioral task
behavioral1
Sample
e90decad58ebf710b75a0e66ea78d1e0_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e90decad58ebf710b75a0e66ea78d1e0_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e90decad58ebf710b75a0e66ea78d1e0_JaffaCakes118
-
Size
26KB
-
MD5
e90decad58ebf710b75a0e66ea78d1e0
-
SHA1
8b463353afd7bd928dac01d004e5f06b6f0ef081
-
SHA256
4e95ac86b1545a2a8ff2370846d117ca039ad4fc346f5609603dd4459bf5ab38
-
SHA512
93afb1ba54d22abc5cd7470b8d83640e139750da99f1062482fad4c92d7d0ab151ff261cc92ec38d868f72f90ba8334c964c2fc462b5a42b9956f57a78deaafe
-
SSDEEP
384:FPPnaYkUFoz84KmDJl/CeDEHpGjUScXi65IKdwFny:FPPn6X84Km7fDEHpyTcXiyIKdwNy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e90decad58ebf710b75a0e66ea78d1e0_JaffaCakes118
Files
-
e90decad58ebf710b75a0e66ea78d1e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ