Static task
static1
Behavioral task
behavioral1
Sample
e08f6b6fc2835dd96d1506d5d1d8c588_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e08f6b6fc2835dd96d1506d5d1d8c588_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e08f6b6fc2835dd96d1506d5d1d8c588_JaffaCakes118
-
Size
8KB
-
MD5
e08f6b6fc2835dd96d1506d5d1d8c588
-
SHA1
178dc5182d3eadc042a55b5b0e56c91f862b82e9
-
SHA256
82ee9ed9b0942e4ca61fc6784e3313f2d6dd2477df963e835fa09d5bda8e59fa
-
SHA512
a0a13d5932842966314e62dd87f3b5f58a6179383d588f4ba016ed48f585bbdd26562e75dafb0f3eec21a2f1aef7613850f511f3e599aa323a8b230080d4f71c
-
SSDEEP
96:c5WguErgDaCb0v2/YmTyIcDIKCW929edyR2PDxaq/N/s/UPFQ:c5Vuywl0e/YFDIKl29efVaq/h2gFQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e08f6b6fc2835dd96d1506d5d1d8c588_JaffaCakes118
Files
-
e08f6b6fc2835dd96d1506d5d1d8c588_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 14KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 88B - Virtual size: 88B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE