Static task
static1
Behavioral task
behavioral1
Sample
e136090a4686fdb482acc67471040a80_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e136090a4686fdb482acc67471040a80_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e136090a4686fdb482acc67471040a80_JaffaCakes118
-
Size
343KB
-
MD5
e136090a4686fdb482acc67471040a80
-
SHA1
723a7e448f640c5820c634e33bf6d9d48fb7e4db
-
SHA256
1d14073cc31288fd63c72ed16e12a7e3cb9d1719806aa47f003c017bd46a410c
-
SHA512
dfde65470b9bf00ec0c97989dbc438242ae5d7d27178aa47b49f475826a0105fee4fa707593385a78efc44d67593039f4892c1ec0ffc3811c9f59a2214f3a370
-
SSDEEP
6144:m5FaHGSDIkep+d/tasTBh74tP78xswBR9IaHb529ODDQP4bOySRD1oVTAcjZVD3B:m5FamSDI6VasHwGvpnHb529ODDfaR+UQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e136090a4686fdb482acc67471040a80_JaffaCakes118
Files
-
e136090a4686fdb482acc67471040a80_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.9MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE