Static task
static1
Behavioral task
behavioral1
Sample
e918c9bd0093b52590c3c93751a84b56_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e918c9bd0093b52590c3c93751a84b56_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
e918c9bd0093b52590c3c93751a84b56_JaffaCakes118
-
Size
144KB
-
MD5
e918c9bd0093b52590c3c93751a84b56
-
SHA1
f805e826904277e4710b8ce6d9da9ee92d80bd12
-
SHA256
ae3eb069d18cf0fc37842f83f013ae322d0e5866a08336f29d96b617d3916b74
-
SHA512
634a906c9244565811e7604c6bfe76752f156f30ae5d0493b4874be4f0e9a150bffa56d0a5346bb33c534a3d3dfed1d338a038bddbf78902d8cdc0bb74710cac
-
SSDEEP
3072:RnubVAXJiPn1eB+QjwdSmbGJS2mVELNm/m1tUu83ASs2H2:tnZiPwC8XJS2IM5tUT3ASxW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e918c9bd0093b52590c3c93751a84b56_JaffaCakes118
Files
-
e918c9bd0093b52590c3c93751a84b56_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ