Static task
static1
Behavioral task
behavioral1
Sample
ed91b7b93d47a0d89ea3b2feda1f37ea_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed91b7b93d47a0d89ea3b2feda1f37ea_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed91b7b93d47a0d89ea3b2feda1f37ea_JaffaCakes118
-
Size
169KB
-
MD5
ed91b7b93d47a0d89ea3b2feda1f37ea
-
SHA1
e5c39bc7ebeb05bad870ba62571bae7f84d5bc8b
-
SHA256
4cea7bd2a825a7154a645703772dd41e550c5db6e2f3692221efaa6ef8de9fc5
-
SHA512
d8c3354e7ffa7933694d841070b7a548498f9dd46a70669ae56b03ead12b0c9897c40780fa29c919eb4c222db686c97867726bfe7366c8e1412fcf5c30719bb1
-
SSDEEP
3072:81LPzZdJEPHiQWkaTHBietI4kOe7V4OE1LiOl8g3Sg8Pc96:8Vz3JuHXoBjttkOe7VRE1LiHq16c96
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed91b7b93d47a0d89ea3b2feda1f37ea_JaffaCakes118
Files
-
ed91b7b93d47a0d89ea3b2feda1f37ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 75KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE