Static task
static1
Behavioral task
behavioral1
Sample
e933e4afe91e208564c282388b367062_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e933e4afe91e208564c282388b367062_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e933e4afe91e208564c282388b367062_JaffaCakes118
-
Size
34KB
-
MD5
e933e4afe91e208564c282388b367062
-
SHA1
731c02be673616d2eebaef43c67f1e6e0b9a6309
-
SHA256
6e94fd26278845e340963c1b345c8f12b77ce816b6fa09c668fb288167c97d9d
-
SHA512
a84803998fdaf7917849f662dc8a45f30084e8e4cc67d9b143faa7e0b2cf8790f55589788b90c40cba47e623053a4467b893bfadf895d5219b31fbe595df5750
-
SSDEEP
768:X8eQhV0B86azz/YygW3xP8Pj+YS37l2DKTxHR:X4VgcqW3qPj5g7Mox
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e933e4afe91e208564c282388b367062_JaffaCakes118
Files
-
e933e4afe91e208564c282388b367062_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.SECURE Size: - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SECURE Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SECURE Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE