Static task
static1
Behavioral task
behavioral1
Sample
ed785bdbd9cabf2bfdbcccf3ea255716_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed785bdbd9cabf2bfdbcccf3ea255716_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed785bdbd9cabf2bfdbcccf3ea255716_JaffaCakes118
-
Size
82KB
-
MD5
ed785bdbd9cabf2bfdbcccf3ea255716
-
SHA1
c879c5b8d5a5487ffa0e3210a5ddbbd8261f804c
-
SHA256
811892bf95d5d8f4ca655ad606c930e676eeea29dc1059f61c568eedbaa56709
-
SHA512
c8f90da010527662a26d60eb0edb0a37cc54640f1d58b7b64ac042c49e5a304547048a6fc048e41a865ff28fe0146383808f19c2faae16a5a06f7d641a55e913
-
SSDEEP
1536:Abc4sTfqpi09MZA73kdG14xmiVXyV5Ks49DP0:Z4ri2rkEQ0Ks49Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed785bdbd9cabf2bfdbcccf3ea255716_JaffaCakes118
Files
-
ed785bdbd9cabf2bfdbcccf3ea255716_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ