Static task
static1
Behavioral task
behavioral1
Sample
e156e62f13d812ddf067d81ea81fb033_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e156e62f13d812ddf067d81ea81fb033_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e156e62f13d812ddf067d81ea81fb033_JaffaCakes118
-
Size
46KB
-
MD5
e156e62f13d812ddf067d81ea81fb033
-
SHA1
aa3a709bc1df347a0efb8f63a2ddb000fd99ca60
-
SHA256
aad8cd1f1079d42221c922d1a82fc918b5b55040bab4ccccf1c488fc95b31b89
-
SHA512
1e46fe8df918b84a48bfd5483c65eb760e1dc89d02f02c5b2be2328c2ffecb4d7af9f8e2689dd8e2567fc7f6b7871b84ed8b538e364f7b8bbf716d81e6eca489
-
SSDEEP
768:IxBG1/WGZkEG+AcHChOgvSYyLN67s27mR8AQYrmph8A9nOWG1o9sq3:IxBG1/WQ/G+AGYOgOpSA8AfmbcWG3q3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e156e62f13d812ddf067d81ea81fb033_JaffaCakes118
Files
-
e156e62f13d812ddf067d81ea81fb033_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
5T80 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5T81 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE