Static task
static1
Behavioral task
behavioral1
Sample
e01442134031e4aedd1b5c71877128b7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e01442134031e4aedd1b5c71877128b7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e01442134031e4aedd1b5c71877128b7_JaffaCakes118
-
Size
15KB
-
MD5
e01442134031e4aedd1b5c71877128b7
-
SHA1
30c2bafcf19838219edb261d813c149ec0ec48ec
-
SHA256
4526518601b1ce5c7b2f73f8af59bf6e29bc15e1502bf9044c09d1db3bd0adbb
-
SHA512
f09731708fc0ddae860d638b07c51033f7c235900b18f959d47fb690f561cbeea6dd2678782154a0f1ef5cde9854715a3dbd9a45c5cf0cba520b59ba956495d3
-
SSDEEP
384:bpDCW8U5zoaOfPEuxGjchYvnzE6FdLvNNN:wAoak8qGxvRXt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e01442134031e4aedd1b5c71877128b7_JaffaCakes118
Files
-
e01442134031e4aedd1b5c71877128b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 852B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ