Static task
static1
Behavioral task
behavioral1
Sample
e06ad4c7377c7252599409d99e3b213c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e06ad4c7377c7252599409d99e3b213c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e06ad4c7377c7252599409d99e3b213c_JaffaCakes118
-
Size
113KB
-
MD5
e06ad4c7377c7252599409d99e3b213c
-
SHA1
3f15795adbedd60a8077ab098ee743af38651f76
-
SHA256
c43438a11c9bb05bee1a676aece260f00440d8cdcb5dcec40a349f5da7237140
-
SHA512
068438d16032e23b2f972de96ce9c1a2010efbab8b579e6d31446d5da032306f150304dde61238e66a3ef5c666ae430e652f2cd901e7b1ed1d00b9ce168403fd
-
SSDEEP
3072:+vjZFhs4SI5fNNLhO4K6scwVZqfB4/2/s6AobFUIUTbQ+B6:QbhsLI5fN64K6scwVZq5ZjAH0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e06ad4c7377c7252599409d99e3b213c_JaffaCakes118
Files
-
e06ad4c7377c7252599409d99e3b213c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.p2c94x Size: 1KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hjizzl Size: - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fsjbl9 Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pgfnwm Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ujp1bj Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ely2ui Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qgh7yv Size: - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adata Size: - Virtual size: 3.0MB
.packed Size: - Virtual size: 456KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.engine Size: 102KB - Virtual size: 104KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE