Static task
static1
Behavioral task
behavioral1
Sample
e06ec285c68dd6906fd33cdef61651b3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e06ec285c68dd6906fd33cdef61651b3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e06ec285c68dd6906fd33cdef61651b3_JaffaCakes118
-
Size
15KB
-
MD5
e06ec285c68dd6906fd33cdef61651b3
-
SHA1
0a15b6139e65aba79e0c14c5af5adcbfe53b9ff6
-
SHA256
2661144c57bbce0792d94ddaa7dddf54fe9e58a6a17bb39426704fefd7b818c9
-
SHA512
419d808fdd090f4fb66c417625cfb3a2ec1a6c914949bf7cb62a39a84f3699f174d0641e1c14f79b2d95dc98713aa0a0f4fc7074528af01fc285ae8e4b3896c1
-
SSDEEP
384:lQR+om9vjVXj7ypGbhU/ICU6j2VkwNipTvY8D8gSEB4RYZ+6:lQR+LlwG1kuNGr49axf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e06ec285c68dd6906fd33cdef61651b3_JaffaCakes118
Files
-
e06ec285c68dd6906fd33cdef61651b3_JaffaCakes118.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE