Static task
static1
Behavioral task
behavioral1
Sample
e0cf048c5363ead2ee61bd4198c2f2f6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0cf048c5363ead2ee61bd4198c2f2f6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0cf048c5363ead2ee61bd4198c2f2f6_JaffaCakes118
-
Size
22KB
-
MD5
e0cf048c5363ead2ee61bd4198c2f2f6
-
SHA1
234c9c4655ae3416741fc280e2dd5f85b96d7b27
-
SHA256
20db800fd1fa4d58949453d8ca33ca1d305b9be247ed6443702a3b2d741ef8b6
-
SHA512
7ba23b38daa9aa7ef831fc3a795a019af557105f162057a95a89c9a678806d0e46f2cf2e4ac593bad6cbac2b809d0bdf7ffe94059ae475f5b1b990ea12c100c2
-
SSDEEP
384:rImHHe7ZqTS8SiLCMhePh2Wxh/s0qUChdgIz7chrvAyDdAJSgzWtFoUeuuLa8fS:/n4aC1oWxhXbChfzCviWleuuW8f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0cf048c5363ead2ee61bd4198c2f2f6_JaffaCakes118
Files
-
e0cf048c5363ead2ee61bd4198c2f2f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 20KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE