Static task
static1
Behavioral task
behavioral1
Sample
e0b296f1dbd88d689cb0c4cbb7f6f81f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0b296f1dbd88d689cb0c4cbb7f6f81f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0b296f1dbd88d689cb0c4cbb7f6f81f_JaffaCakes118
-
Size
379KB
-
MD5
e0b296f1dbd88d689cb0c4cbb7f6f81f
-
SHA1
c653721305713f320705327fa4ac326e11f1d40e
-
SHA256
31bb4a00265d60c924c87cb321274c3d6a57430730623a1af0e652d706a7621d
-
SHA512
a114b3a29dc4dd6575e372ca5be9bbdcbfd96d6502b6444ac5873d88685dd40335325987b04798d88ec79fc678c9555f8e0b222466630a3a4dbad798974a7806
-
SSDEEP
6144:WjpjhXnGcHF2idZecnl20lHRxp3g7ncduD7yB9VCO6Sco4q8+dE6Cqh5OW:WjF9zF3Z4mxxkDqVTVOCD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0b296f1dbd88d689cb0c4cbb7f6f81f_JaffaCakes118
Files
-
e0b296f1dbd88d689cb0c4cbb7f6f81f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 21KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 340KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE