Static task
static1
Behavioral task
behavioral1
Sample
e039f36660bca1988e3070028bc41f98_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e039f36660bca1988e3070028bc41f98_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e039f36660bca1988e3070028bc41f98_JaffaCakes118
-
Size
303KB
-
MD5
e039f36660bca1988e3070028bc41f98
-
SHA1
b86a032f6b1768fd952769e33a9e9d3d1f2f6888
-
SHA256
af61cb06b451e0d95e2596e2f344fba2a945cb80f3db63f4f2f12bcee85a33dd
-
SHA512
870818ecc36e12a7555cd2575d39e2a6cb781932a2e4bcea80866b4c7885ca3006a8e91cb194e22cc5c195fefd35e29a4577457fe7ed0580f1f2b0945005008a
-
SSDEEP
6144:I9UfcksmDPB8DpoD0094vTRBKL7awQkjAeuK5YIE5c275nKKpqdLCpAL:QNkJP2aglvTfWuwQkWK5UR5nZpqdGpAL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e039f36660bca1988e3070028bc41f98_JaffaCakes118
Files
-
e039f36660bca1988e3070028bc41f98_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
pHY0 Size: - Virtual size: 964KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pHY1 Size: 302KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pHY2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE