Static task
static1
Behavioral task
behavioral1
Sample
e0f8b0df1697e5844b650bba0ead7720_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0f8b0df1697e5844b650bba0ead7720_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0f8b0df1697e5844b650bba0ead7720_JaffaCakes118
-
Size
672KB
-
MD5
e0f8b0df1697e5844b650bba0ead7720
-
SHA1
c01a13f86d413f9b88ab63672a8af8ea8eeee774
-
SHA256
cfcbfff3fa38b1f0729d5300672755bfcc830343a7d11fad67516b2464355764
-
SHA512
c84895e581cd635992385ebbda38e96dbceedc84b511cd75d5f508f68dd4b23cdefb2681cd1e122076fa766bc41cc639d8614f216ad5518a2d68308e6e84b201
-
SSDEEP
12288:Nban5laK2O8+c+iPjuGJ/eEKbHa1aNv4VhW3LbkO7i/x2zsrW2qserjs9r1:daQOc+iPKMGbHa1aNwvokOmp2QrtqNjq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0f8b0df1697e5844b650bba0ead7720_JaffaCakes118
Files
-
e0f8b0df1697e5844b650bba0ead7720_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.8di$rs Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.coe5ee Size: - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.9g6jli Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.2o1h6k Size: - Virtual size: 698B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.9f9li9 Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i03d2p Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdsyxb Size: - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 929KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 3.0MB
.debug Size: - Virtual size: 408KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.null Size: 661KB - Virtual size: 664KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE