Static task
static1
Behavioral task
behavioral1
Sample
e05023d0fba651494a2ec7e76d8efe70_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e05023d0fba651494a2ec7e76d8efe70_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e05023d0fba651494a2ec7e76d8efe70_JaffaCakes118
-
Size
18KB
-
MD5
e05023d0fba651494a2ec7e76d8efe70
-
SHA1
3813d7dea01b9bc709e576872135d1824c37e92f
-
SHA256
ed3e54bfcc175bf39be9ce24fada868049431a6a207d5d006a9c94a850a39f17
-
SHA512
56c5a875e560b6e8aedeff3e6f83c74f05cb8f70abc44ea90d9f550e0d7db60d63793f5dde640d5e8a1cca4828d36a40756ab9951653d03317f01eebf796f856
-
SSDEEP
384:HRxXYoDvuq+b8Q0ICFcF1O06GPDYyHwAyGgwp5O8sL36WLpMMF:3DPG8IgcFR0xGg+5O8s3N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e05023d0fba651494a2ec7e76d8efe70_JaffaCakes118
Files
-
e05023d0fba651494a2ec7e76d8efe70_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE