Static task
static1
Behavioral task
behavioral1
Sample
e13d051247fb55e44cd7cbb6b8f2d881_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e13d051247fb55e44cd7cbb6b8f2d881_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e13d051247fb55e44cd7cbb6b8f2d881_JaffaCakes118
-
Size
238KB
-
MD5
e13d051247fb55e44cd7cbb6b8f2d881
-
SHA1
02f1c75420f6a4d7f7d41645fcf8d489cef40598
-
SHA256
956e72c1f17aa9295e9c5fe27f52e45a8590ac6250df1f8b8fbd3f6d974f3e3b
-
SHA512
e0e62354996ae7127742318222d06e4ba39cb20ac49f4301acef8858cb6c9f3750466072c0ac6db9e555c907f040732dc7e042be84185e7f14d1b9d247b9f692
-
SSDEEP
6144:0cM4e9BKWoiU9Acc/0pYv0Nw3K14JMc4Oghf6:49wp9Z360914x4O4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e13d051247fb55e44cd7cbb6b8f2d881_JaffaCakes118
Files
-
e13d051247fb55e44cd7cbb6b8f2d881_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 692KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 238KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE