Static task
static1
Behavioral task
behavioral1
Sample
e04dc5cb03bdc4b59193247d5e2f1c93_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e04dc5cb03bdc4b59193247d5e2f1c93_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e04dc5cb03bdc4b59193247d5e2f1c93_JaffaCakes118
-
Size
111KB
-
MD5
e04dc5cb03bdc4b59193247d5e2f1c93
-
SHA1
58e812671843a933ac25805ec1aea528573b14cc
-
SHA256
d7d145aaa86af750b5cf20749df7a57b4fdbcf73d9bd1cf0e051dd9d563e66ef
-
SHA512
738ec44619b968d08826127e23b6eed46c895bb6eafd42ca1a6849c17dc16e560f3020fd1eb0f1c4d047481c1aacc5abb0af01af80d1387035859893544e935c
-
SSDEEP
1536:c1Lgf8+RqE5QmbgzPaBxOVBaXWafJ6C+/Iz4wcgXpJaiuHZ+jp9zHQHQh3FIy:RZ5QYBxAB5I8wNJarUpxj9FIy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e04dc5cb03bdc4b59193247d5e2f1c93_JaffaCakes118
Files
-
e04dc5cb03bdc4b59193247d5e2f1c93_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 269B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ