Static task
static1
Behavioral task
behavioral1
Sample
e9e4f2a5e81cefedba3f7e85d82de1a2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9e4f2a5e81cefedba3f7e85d82de1a2_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
e9e4f2a5e81cefedba3f7e85d82de1a2_JaffaCakes118
-
Size
525KB
-
MD5
e9e4f2a5e81cefedba3f7e85d82de1a2
-
SHA1
2c049fd1928c813efaeaf995610891109c74ebf0
-
SHA256
ff35d3c101d0e2c14a6420408b74c91147d9dfc58b0dac5f95014f87db868f3d
-
SHA512
89a75a15f3e279bd594d75069cb03866f031a2ff71f8643ee12a84deb083c14188c94ba362bdd059ee224da8bf09a6d025519d22ee511c369b1fd2bcd079125c
-
SSDEEP
6144:3hcMSbeohE9q2PsXrSVew/X2+wZHeSPVep6s6BCF6GfEWfadRNH0QtoSp:3SNe2E9/cZw/X6eSPtfS6G6ZoSp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9e4f2a5e81cefedba3f7e85d82de1a2_JaffaCakes118
Files
-
e9e4f2a5e81cefedba3f7e85d82de1a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 348KB - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE