Static task
static1
Behavioral task
behavioral1
Sample
e91a15d6b73021cd52a5a0d52d0336f4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e91a15d6b73021cd52a5a0d52d0336f4_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e91a15d6b73021cd52a5a0d52d0336f4_JaffaCakes118
-
Size
114KB
-
MD5
e91a15d6b73021cd52a5a0d52d0336f4
-
SHA1
e9a6a22d1c50ff2a0b702d94de4a67568ae4d94c
-
SHA256
d58caf78b8b084ebc8baf35191de99a4a81c3359c4fcc385fc639fd9be0a61ea
-
SHA512
c5130dad43b6ce70b43f636b1013f516acedca882338e6997d734d46f66c8b343673ed5da2bdf278456d17754ae9abd3c3d272cfc0b0bfb8f47de047958c8204
-
SSDEEP
3072:ytVsS1JBsy5ILGvgVEr8L51JdENuOEcra31sstJltet3dsJN:FS1JBsQIyvgVCuzMfaFsCe4JN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e91a15d6b73021cd52a5a0d52d0336f4_JaffaCakes118
Files
-
e91a15d6b73021cd52a5a0d52d0336f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
5�80 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5�81 Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5�82 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3g5uRNX0 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ