Static task
static1
Behavioral task
behavioral1
Sample
e91a20029ae0a25eb5fa90cb5a81d104_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e91a20029ae0a25eb5fa90cb5a81d104_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e91a20029ae0a25eb5fa90cb5a81d104_JaffaCakes118
-
Size
6KB
-
MD5
e91a20029ae0a25eb5fa90cb5a81d104
-
SHA1
5cec9061d95d02c2f25b737895de1320789c1b99
-
SHA256
14fc666adfb75aa4202788a2b441a37eef37f6d917469bc17be48bf14e66971a
-
SHA512
b465bebeb0692577282bff2f13d47e1a9dbd6f613c2a68a433aafb39fc00ed1c8c2307a2e24abafb057e14dc4e3a0323a5d5e4ccca9ac87abdeb77e57df3ead7
-
SSDEEP
48:7cqQu77X8oaASoU4IBexfdBd8Lhr4c0arcLISp5SXHOCF7sjbtgLj2ZiDu/Ji0:nTH8oaATln2hVP8SXvsjbG5SBp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e91a20029ae0a25eb5fa90cb5a81d104_JaffaCakes118
Files
-
e91a20029ae0a25eb5fa90cb5a81d104_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 392KB - Virtual size: 389KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ