Static task
static1
Behavioral task
behavioral1
Sample
e0056e7e0550f4220b70083e19d8f371_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0056e7e0550f4220b70083e19d8f371_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0056e7e0550f4220b70083e19d8f371_JaffaCakes118
-
Size
107KB
-
MD5
e0056e7e0550f4220b70083e19d8f371
-
SHA1
89661be9369e32c84f32e01e40cdfc9e375b3a02
-
SHA256
b3609a068ecb67a04541af3bc718ae560654ec0173602839b7e2926fabe00db4
-
SHA512
2d96300c85a45b89d6e127fa8c01a127a365645924e0ce6adc2accc02c4a1d079bd92dae2e8c615967ffbf4648e7193e9fbc7c51764c16a7fc51bc2309503f6d
-
SSDEEP
3072:8s23gg7ux4w20hVabrwPob81tCv5KSYTJK5Nkv:eLeForm1t0KvTJLv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0056e7e0550f4220b70083e19d8f371_JaffaCakes118
Files
-
e0056e7e0550f4220b70083e19d8f371_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 79KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oumysoo Size: 960B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE