Static task
static1
Behavioral task
behavioral1
Sample
e9b31b08ce91885c2420e1cf4b8bb8f4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9b31b08ce91885c2420e1cf4b8bb8f4_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e9b31b08ce91885c2420e1cf4b8bb8f4_JaffaCakes118
-
Size
512KB
-
MD5
e9b31b08ce91885c2420e1cf4b8bb8f4
-
SHA1
1be29b091c6d08fd5f1d9d11f78ed366b17c13dd
-
SHA256
b8080bda12d9ab8f77e1823ed8f6adffca00a8e5989c8a012c3b2be21a64236a
-
SHA512
a9409d670f508a8fefffb62e09084f29eba197233dfc11af38a11cdc73d6300f4a33b4b58058525fb97d55596ed237ffc4f269c2a248f95b626611510ccdb270
-
SSDEEP
12288:uS+7tJlJM77jzyrfJ9yW7NML9uBh9dpRhrRr0RG:u/JJyb01m5q3pRhr9IG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9b31b08ce91885c2420e1cf4b8bb8f4_JaffaCakes118
Files
-
e9b31b08ce91885c2420e1cf4b8bb8f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 800KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 319B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE