Static task
static1
Behavioral task
behavioral1
Sample
e0819aaa9bf13ec305124fa6cde259c5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0819aaa9bf13ec305124fa6cde259c5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0819aaa9bf13ec305124fa6cde259c5_JaffaCakes118
-
Size
112KB
-
MD5
e0819aaa9bf13ec305124fa6cde259c5
-
SHA1
16e49fb8a5de8d8f60ae1c8b3968908762f79743
-
SHA256
f53d7d305d688d9f805bbfab06fa9e9ec13e246534be99243fdc5e660da8ec6c
-
SHA512
01dab378ba3951b64eb21e2cb31a4694466f77c2c361374d9f4f4674ac7cc13b9d6feb40bae78848b0f3441edb914d800743e3877ac745877ab5ec866860fa72
-
SSDEEP
3072:Hs29bgFxgKXF1lxitOEJ2PTyRItHdllfwZF:f9b8DiQEoHx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0819aaa9bf13ec305124fa6cde259c5_JaffaCakes118
Files
-
e0819aaa9bf13ec305124fa6cde259c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
mfrgtr Size: 1KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vxzp Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ