Static task
static1
Behavioral task
behavioral1
Sample
e98916e08eb0fdf7b85551620001e6c6_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e98916e08eb0fdf7b85551620001e6c6_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e98916e08eb0fdf7b85551620001e6c6_JaffaCakes118
-
Size
244KB
-
MD5
e98916e08eb0fdf7b85551620001e6c6
-
SHA1
03b3baef1f9648f394787df667f34d0d7acbfa88
-
SHA256
e8c70db20b84f1e75972f59ea832f0eba2105c21e5ef026a14ee86b453d757ea
-
SHA512
0e6cf748a6c3ef58b28ee3bb41b06fd20628147f5fc9558675148cbf4632384a57f91581d0c24e06e9b7025f93a2499599c88b33d557e9e1452e171ec50eb07e
-
SSDEEP
6144:afFL/bVMbfgkCkZbVNCz04rnbKv9n1YkgQQwkaeFUC:aNvVMjgrKa04Y1YKkaej
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e98916e08eb0fdf7b85551620001e6c6_JaffaCakes118
Files
-
e98916e08eb0fdf7b85551620001e6c6_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 343KB - Virtual size: 342KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ