Static task
static1
Behavioral task
behavioral1
Sample
e020e17031974730a3112d55216bf651_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e020e17031974730a3112d55216bf651_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e020e17031974730a3112d55216bf651_JaffaCakes118
-
Size
351KB
-
MD5
e020e17031974730a3112d55216bf651
-
SHA1
ee64fdc0f2a3f87651483e994110740c9027840b
-
SHA256
2c8e816ff5f9fb83cbc182ffc75f4a8765232d4c08bc8eefe924dd02ef8c67f1
-
SHA512
2e7e54c144635f33c50cfd0f7de6ce5a9ab708fa2201ac6a498fbe99ff9eb83258b512ee941857e1b3a3be543c3f4764055c019ea549e54080364468e8ea1f9d
-
SSDEEP
6144:GHFfxgCVmo9DpVSHR0ab7apSYMuE8TbuVfnYFBFp4hTzdZONOx7Y2:MGCzzS5apSBuE8WfnCMT+g7Y2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e020e17031974730a3112d55216bf651_JaffaCakes118
Files
-
e020e17031974730a3112d55216bf651_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 323KB - Virtual size: 664KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE