Static task
static1
Behavioral task
behavioral1
Sample
e1036ffefd02016fae038352c9d82200_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1036ffefd02016fae038352c9d82200_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1036ffefd02016fae038352c9d82200_JaffaCakes118
-
Size
101KB
-
MD5
e1036ffefd02016fae038352c9d82200
-
SHA1
dda7b8faa1d705c57890f9e65d1a668a4ab03222
-
SHA256
8dc71dbddb1e699cee8b24312251ee9a0125d9a6647e34d28033156e0518674b
-
SHA512
a64e01133d3d175e5b8bcf6ba28a8bd145ebd8e15c415fc64ebc86c44052101af834b1f93b5c1fd4db65b1874653ff6059173e1dc0bee0e0f1cc393a9b59921b
-
SSDEEP
1536:KLwSWFV7ky9ofCljpUBO7DhoOJ0LhmkvnbXov+cbCT68IndglnYJn+cAUnP9m:Ks73EC1pgWLJyQkvMhbK68w+nM+cAem
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1036ffefd02016fae038352c9d82200_JaffaCakes118
Files
-
e1036ffefd02016fae038352c9d82200_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
s Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9t9oyv4c Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7a9wf Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE