Static task
static1
Behavioral task
behavioral1
Sample
e95629d70d607a1ebcbce340d3a27845_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e95629d70d607a1ebcbce340d3a27845_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e95629d70d607a1ebcbce340d3a27845_JaffaCakes118
-
Size
65KB
-
MD5
e95629d70d607a1ebcbce340d3a27845
-
SHA1
ecc72ae830864d79507cd37ef91f8c3cf0c2ca83
-
SHA256
dbaadde5f76127c8a0baa6e4405830f32dbe9ef9b774cb0aedbf05c67986808d
-
SHA512
92123ce3701b65d1df99425df86f4190b22cb69231b1b1ecdb0df499bcb43433a5068343e86b2c20c52a934727d192aa2a5decc6f0780a4d409f501624a319a0
-
SSDEEP
768:C2RbEqt26jw4h0sg9Hp9iTNtDYlceDRROYtsM63CoKW8khsnqPLmKw9oh53LgiZt:nRoqNsxITjDu7RROijoZhsLVOreu7ZMi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e95629d70d607a1ebcbce340d3a27845_JaffaCakes118
Files
-
e95629d70d607a1ebcbce340d3a27845_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.2MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE