Static task
static1
Behavioral task
behavioral1
Sample
e146511ac076ba4ed0dd4291968230d6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e146511ac076ba4ed0dd4291968230d6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e146511ac076ba4ed0dd4291968230d6_JaffaCakes118
-
Size
54KB
-
MD5
e146511ac076ba4ed0dd4291968230d6
-
SHA1
75059822de3bc25bab83205958a8e2893181fcc7
-
SHA256
9092c6c0ec6d8b77691c03eb97fcaee3406e44469b060763ad5e2fa536f0de42
-
SHA512
5ae8026e5a5a9a857e37d4c1f51cc10885c032974de5eb67c624825d252aa9cee9acf9a530ef463def107089a2441ed03bca13904828888d821f72e8641e876b
-
SSDEEP
768:FTnITr4BXF+NW47owxfy6sABJGJvIrS3i8diVjV7MJY3DrS7TpdG1n5/m23Ww8JD:Fj4r49F+kmhyzA+1iRV7M2XF5/zWjJD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e146511ac076ba4ed0dd4291968230d6_JaffaCakes118
Files
-
e146511ac076ba4ed0dd4291968230d6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
\3�$0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
\3�$1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
\3�$2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE