Static task
static1
Behavioral task
behavioral1
Sample
e04aeaa36b7125b20f2b925e315dff7a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e04aeaa36b7125b20f2b925e315dff7a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e04aeaa36b7125b20f2b925e315dff7a_JaffaCakes118
-
Size
9.2MB
-
MD5
e04aeaa36b7125b20f2b925e315dff7a
-
SHA1
79f7e299777cfdefae924de9c9371191e59bfd92
-
SHA256
d72c4b519527e7df58d3c63b6fc749c6d4c78924d3922351a46cc389bfda7add
-
SHA512
bc70bb7598833be7da2f9e72406ed6b15d92460e385e74232109ffbf099d5d0d229b49be632be97ab57dbe024ea06b67c195f0e39dffd003a9cb3631e848c10e
-
SSDEEP
3072:CwOwsu4I7nTUHeXAcJtKWnK5IoRV0+TWmbPxb44/If:Vj4OqcJ4OK5P5bPx1/If
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e04aeaa36b7125b20f2b925e315dff7a_JaffaCakes118
Files
-
e04aeaa36b7125b20f2b925e315dff7a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 9.1MB - Virtual size: 9.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 6KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ