Static task
static1
Behavioral task
behavioral1
Sample
e081381e94239ba6baf65852a7984e37_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e081381e94239ba6baf65852a7984e37_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e081381e94239ba6baf65852a7984e37_JaffaCakes118
-
Size
383KB
-
MD5
e081381e94239ba6baf65852a7984e37
-
SHA1
3a0a4218d90b37cbb02377bd5341610a6ae47d6d
-
SHA256
e8cf2855f6428e1a237afb7c46387b456d1159f88faa2bc46ff8b4682f7b5480
-
SHA512
d6804bca72d513b7946b9bdb2804de0600cb50de09bd1178a13d7385c479731f6829c0d638c68f8ac935c3d8f9d7db5c18fd78df2594aae6456e5a86ef6d833c
-
SSDEEP
6144:ejNTpQlfw7hTSF2idZecnl20lHRxp3gmQcv4LSiXnw2NlseYttCbbUU63mFSgYFB:yNTalI7hKF3Z4mxxzv4LSiHlhYtt3Uxc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e081381e94239ba6baf65852a7984e37_JaffaCakes118
Files
-
e081381e94239ba6baf65852a7984e37_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 312KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE