Static task
static1
Behavioral task
behavioral1
Sample
e937580a899ec2b82632eb882e03f1b1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e937580a899ec2b82632eb882e03f1b1_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e937580a899ec2b82632eb882e03f1b1_JaffaCakes118
-
Size
139KB
-
MD5
e937580a899ec2b82632eb882e03f1b1
-
SHA1
8c97a39a9b20a0803bc415c1b3d0c6786aaaf352
-
SHA256
03a9305a222cd696c8b65b40d1bd27a8e94d883f6a416dde3a436615e441745f
-
SHA512
4c5966a08ab3b5b365433651886f53b2af743e55c4a3bd6f8e4e5d28d0f97cb1284da99cd4ad44ae3cf9f073b75278a6c719fd0eced199128ceed8815cf3a0c0
-
SSDEEP
1536:mY8lYZSccCgwWYaziLoF2N2CFLcVygnaqoJrrHsj40Ahm5:mgSccsWlXCFLcVygnaqoRrE40Ah6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e937580a899ec2b82632eb882e03f1b1_JaffaCakes118
Files
-
e937580a899ec2b82632eb882e03f1b1_JaffaCakes118.exe windows:4 windows
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
petite Size: 379B - Virtual size: 379B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ