Static task
static1
Behavioral task
behavioral1
Sample
e0c3ad056b9f0d3e3c5f3268cde73b97_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e0c3ad056b9f0d3e3c5f3268cde73b97_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0c3ad056b9f0d3e3c5f3268cde73b97_JaffaCakes118
-
Size
77KB
-
MD5
e0c3ad056b9f0d3e3c5f3268cde73b97
-
SHA1
242fbf6eeb8d5a39a69e435f72ff8d6ed866d358
-
SHA256
2be85bfce7fa0e2512e4475f91039e7d0cc73d024a4fc19b157cdd05b58c7ce6
-
SHA512
9b114c38eb353fb84e4311a20c68090a9b10ccaf1c6cde523d15439dc6c53f81f1cefcd78ac06805f5bb8b5a35d3b2f68d43b1e26372aea2e2ed7ff6f72a3ef5
-
SSDEEP
1536:I3MdTaMgXvl5CjtrafSkjHPit0CBX46x7kKEMEF48x9wyjx0sp/qb:I8d2Mgt5CjtmRjHPi+CBX9/vseb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0c3ad056b9f0d3e3c5f3268cde73b97_JaffaCakes118
Files
-
e0c3ad056b9f0d3e3c5f3268cde73b97_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
txhfe0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
txhfe1 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
txhfe2 Size: 616B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE