Static task
static1
Behavioral task
behavioral1
Sample
e109c9e60349d3148bbfef957dabe695_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e109c9e60349d3148bbfef957dabe695_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e109c9e60349d3148bbfef957dabe695_JaffaCakes118
-
Size
780KB
-
MD5
e109c9e60349d3148bbfef957dabe695
-
SHA1
86c271869f010caf918bf610f9f437fa6b9b8072
-
SHA256
926609148208650d9f2f815330c0d6a3f06fb57dc6c574d6886210931ff6ad12
-
SHA512
d9214a1d9c585a3c6ad6fb6f18bd419596d1c3269bb6b7e02675e8fadbb792136f1a05e4d62464e17d2f3b62d715154c58ebd185ec6063b2dd5c0dc8d282aca0
-
SSDEEP
24576:fdKH5fWTTI3AuGgxeOO3fPTAAeLKfz5p2HG:fCMTI3AlgxeOOPZjzCH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e109c9e60349d3148bbfef957dabe695_JaffaCakes118
Files
-
e109c9e60349d3148bbfef957dabe695_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
EPE0 Size: - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EPE1 Size: 779KB - Virtual size: 778KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 405B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE