Static task
static1
Behavioral task
behavioral1
Sample
e098f675a1c0e69bf797374f8a65a3dd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e098f675a1c0e69bf797374f8a65a3dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e098f675a1c0e69bf797374f8a65a3dd_JaffaCakes118
-
Size
129KB
-
MD5
e098f675a1c0e69bf797374f8a65a3dd
-
SHA1
05e5be847ed4a771931448052ccb92a12c5847a8
-
SHA256
5f00374399624e666562e3fd57e1caaa74434cb4cea44246ac6ec60ce2a7dc06
-
SHA512
31e94f574c1b9189adf976f5849f514422487da097c27d35ba76ca00906c0907b603ac2226d0fce560f35d5d6ef81a1c58b29171b6a148f97716f022a708c690
-
SSDEEP
3072:wMTtg1xUlL0JCs3kTmjFF0K6SFIXx8+YbTBp5b7YuG7H+G:lx7L0JT31f0vSFYu+YbdpLGb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e098f675a1c0e69bf797374f8a65a3dd_JaffaCakes118
Files
-
e098f675a1c0e69bf797374f8a65a3dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE