Static task
static1
Behavioral task
behavioral1
Sample
e95bfb3dbba26071f821353c7c5905c2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e95bfb3dbba26071f821353c7c5905c2_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e95bfb3dbba26071f821353c7c5905c2_JaffaCakes118
-
Size
59KB
-
MD5
e95bfb3dbba26071f821353c7c5905c2
-
SHA1
b06b4f9022ba22241912f12e3c81a9867839c02d
-
SHA256
c1b22ebaf43f84bce0c3694356c928b737f28e7ae024cef3d91965552e665b94
-
SHA512
37be7bdab084eb10b82a4ec95b2a78d8b1aa0223d4bcddf42c723e991ffc5706c40879dbc6544e8fc5737d569c297bd1652b34b1d0b1f7d2913269a6902a8828
-
SSDEEP
1536:1AnpB0hx9xKGEBhtCN/L4GmVnpkm0Jnhx:1e+hTI1/4N/L4Gc10Jb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e95bfb3dbba26071f821353c7c5905c2_JaffaCakes118
Files
-
e95bfb3dbba26071f821353c7c5905c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
dssadas Size: 16KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
sdasdas Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dssadas Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sdsadas Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE