Static task
static1
Behavioral task
behavioral1
Sample
e0a15e959ccae46ba94faf903ef79f25_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0a15e959ccae46ba94faf903ef79f25_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0a15e959ccae46ba94faf903ef79f25_JaffaCakes118
-
Size
109KB
-
MD5
e0a15e959ccae46ba94faf903ef79f25
-
SHA1
597717c5ad443988782b49ed9052d93d16735d02
-
SHA256
489d8efa1f58bbba96537a69c82f21f90fbb8c80b6a14fb947be76160cc362e4
-
SHA512
54349686b2aec35f917d48c0f8298b57c0efde851d90907e1b2dded4b3c0a78f93e19d599cf64e4800a09763efa223a5360484fcf81f18a9dd7ac4dde9138684
-
SSDEEP
3072:RYs7vLJ3ehdzUI19dNI/G7hM3oxVGkpkkG9eH:OABebF/rALkpkiH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0a15e959ccae46ba94faf903ef79f25_JaffaCakes118
Files
-
e0a15e959ccae46ba94faf903ef79f25_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE