Static task
static1
Behavioral task
behavioral1
Sample
ed180dc15f945a5df6b3b4bc6e98c7ee_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed180dc15f945a5df6b3b4bc6e98c7ee_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed180dc15f945a5df6b3b4bc6e98c7ee_JaffaCakes118
-
Size
31KB
-
MD5
ed180dc15f945a5df6b3b4bc6e98c7ee
-
SHA1
ebc5f054b0fff85c89b07a5d87dd3bfabe0eb32c
-
SHA256
8f729434584212dacd374d69acb6ee60e9d7417b07b9d0d9a5ab436817630e4d
-
SHA512
6aabf74ec5f09e1224e2b4bd7c9dc62afac8c895508783a2ad8ad4eeb9b72fc4451461cf1d8e369387074e4c58c1f65b66c473c73005898060d8a5ef98d9fafd
-
SSDEEP
768:FeVJMfmYSr/hYVfZ2sJdTfNNOpLdnUxrROwtnbcuyD7UcNWGy:IkuYSr/6VfZjD7qnUxrRJnouy8cc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed180dc15f945a5df6b3b4bc6e98c7ee_JaffaCakes118
Files
-
ed180dc15f945a5df6b3b4bc6e98c7ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE