Static task
static1
Behavioral task
behavioral1
Sample
e14017da83d195e0a27ce10c91a16a20_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e14017da83d195e0a27ce10c91a16a20_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e14017da83d195e0a27ce10c91a16a20_JaffaCakes118
-
Size
91KB
-
MD5
e14017da83d195e0a27ce10c91a16a20
-
SHA1
26ca9bfe1809aba993a484cc1feafa2b1b885821
-
SHA256
ef5e558798cc7519e43c950784a34d238fb65d5620c06feb6b2d2ee549ce99cc
-
SHA512
6228febf319e7669cc120532ba145f36d5bbb613a590716c6b3dc673470391c67355a112da3d28a8ca2ab17baef329d1e8adc99f87114fe86c105fd0e01c8577
-
SSDEEP
1536:fLtlxzI/ahYeMvZwzoI/HoNO7sSfInuujC/KCRSbe/k0slIz1DYBvMiIs44wcEmy:5lxzI/U6xwUCsO7EuuC7ye8vlIRcNMsO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e14017da83d195e0a27ce10c91a16a20_JaffaCakes118
Files
-
e14017da83d195e0a27ce10c91a16a20_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
mlsa Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ