Static task
static1
Behavioral task
behavioral1
Sample
e04fe10bd74b41f837565fa21e0033c2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e04fe10bd74b41f837565fa21e0033c2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e04fe10bd74b41f837565fa21e0033c2_JaffaCakes118
-
Size
1.9MB
-
MD5
e04fe10bd74b41f837565fa21e0033c2
-
SHA1
d79f1b20b531914dd0f328346d104319e7ea91ad
-
SHA256
e07f8f4ac0d93f71063749446d2a785ed2325b7b66c01af27bcf5eed3942372b
-
SHA512
8cad94d342e27ef8a846b87aa04a74b8e4d16649f535ac37535ea9809f0724660b43fa2460c8a8790e03c62c604e9e7657ae4b427bfa13b171b06bf6eb08ff26
-
SSDEEP
49152:KjIJR1onK4M6VfXj6gW0pR5SJ4wSkGYRiJIGS8sR3O/:KjI0K4M6Vfz61q2JqtSF9O/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e04fe10bd74b41f837565fa21e0033c2_JaffaCakes118
Files
-
e04fe10bd74b41f837565fa21e0033c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.6MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ