Static task
static1
Behavioral task
behavioral1
Sample
e9bc363592c3860b64784833cfd825ae_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9bc363592c3860b64784833cfd825ae_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
e9bc363592c3860b64784833cfd825ae_JaffaCakes118
-
Size
100KB
-
MD5
e9bc363592c3860b64784833cfd825ae
-
SHA1
aa5edd1bdd2f2d28aca0617a0da47da6ee704be8
-
SHA256
699ea39e0066f752614a8a9ed158cb87db3bf6bbd5a4de2f7f978e1dddb9fff1
-
SHA512
5f8eca63de3d884eea80df3f13bd615940bfe47ce89be4f0c2b76938f15e9054ccd5060dd716da2b9343e95bfae18c0fa3500f99c526057486d10868da3d07f0
-
SSDEEP
3072:p26xs+h7qev8xIZxxVR9Taszs39YME36ceBH:Dxsw7q0VR9JAtYMI2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9bc363592c3860b64784833cfd825ae_JaffaCakes118
Files
-
e9bc363592c3860b64784833cfd825ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
uyy Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jdc Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zr Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE