Static task
static1
Behavioral task
behavioral1
Sample
e9332c1db76a053c594b7dce3bdaaf6e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9332c1db76a053c594b7dce3bdaaf6e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e9332c1db76a053c594b7dce3bdaaf6e_JaffaCakes118
-
Size
69KB
-
MD5
e9332c1db76a053c594b7dce3bdaaf6e
-
SHA1
b733e41745622b4ccaa71914870da1aea8cc3015
-
SHA256
a731d3c87fdf098bd394cce1be3ac96b32ad767f323750b2f3f3b47103827f79
-
SHA512
500908d5b8b42f81f948a96d2bbae5c4b8bd5e905e0bdc1e2e90ec72392e75b29ede611ae4769a5d3b7025e29de30135b15632dc13cbb34c142fa0228cc7f725
-
SSDEEP
1536:QSOZCWftwbz/4aFC1SvxDf9u+1B0uDRSt0E/fVNN26Z1Hld:QjCWftwbzSGxD1ugDEfhh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9332c1db76a053c594b7dce3bdaaf6e_JaffaCakes118
Files
-
e9332c1db76a053c594b7dce3bdaaf6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.code Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE