Static task
static1
Behavioral task
behavioral1
Sample
e098c4cf2ebd8a9ce3b3688b688c7d66_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e098c4cf2ebd8a9ce3b3688b688c7d66_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e098c4cf2ebd8a9ce3b3688b688c7d66_JaffaCakes118
-
Size
93KB
-
MD5
e098c4cf2ebd8a9ce3b3688b688c7d66
-
SHA1
e319ab51511386494e13723e2cc779103080618e
-
SHA256
433128a96bceb9bd7a8d8f71c6df34a31a29757d09a93cc4396f22a2953c6bea
-
SHA512
a17b8ae16bceb794a7dea22e1f89e8a3217341c0d42e858d908ffd66915ac100c35408a74740271b655f48142066171981b33a543dbb2002eb03fb1226a9b6cc
-
SSDEEP
1536:57xIyIHO53FEX+Il2xtCtcjHU488+XiyVAhUjkUuOg07ZdG+2Q7gl5aYm5Hiqvbl:57xI21EO+2xtCtcjHU488YDjbXgAZ4+P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e098c4cf2ebd8a9ce3b3688b688c7d66_JaffaCakes118
Files
-
e098c4cf2ebd8a9ce3b3688b688c7d66_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.novcbh Size: 1KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gsji5a Size: 14KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 518.0MB
.data Size: 76KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE