Static task
static1
Behavioral task
behavioral1
Sample
e985bb46edb6f5e2707f5a47074c59f5_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e985bb46edb6f5e2707f5a47074c59f5_JaffaCakes118.exe
Resource
win10v2004-20240319-en
General
-
Target
e985bb46edb6f5e2707f5a47074c59f5_JaffaCakes118
-
Size
170KB
-
MD5
e985bb46edb6f5e2707f5a47074c59f5
-
SHA1
41cc057d966dad022076549acca7a4fc03d49416
-
SHA256
4cb30a49a73eadcf3363d9a4676eccc4601671f68acf79e6b21c80afa4488c8f
-
SHA512
0344f4f5d6fb414512ca07477f4d505a7c8abd5edaa3667a10e6eb432af8a004f316f15b46e685e5d1778126ff4398ad2bc2e63833153eef8765e567fc8984c3
-
SSDEEP
3072:cRCF/KDmKhLO8cOd7oDYBqxS8FeFfHH/oXtSW/jwAc4BUfeaiwPW:aWKaJnK8ABHYtp88GeaT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e985bb46edb6f5e2707f5a47074c59f5_JaffaCakes118
Files
-
e985bb46edb6f5e2707f5a47074c59f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 162KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE