Static task
static1
Behavioral task
behavioral1
Sample
e158f863a2d3ebbb83f8b81634544918_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e158f863a2d3ebbb83f8b81634544918_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e158f863a2d3ebbb83f8b81634544918_JaffaCakes118
-
Size
26KB
-
MD5
e158f863a2d3ebbb83f8b81634544918
-
SHA1
70ab834c6d0764db5d6d3504cff5c4c9293b5efc
-
SHA256
f56592e73711048fd70ccd80aa445b9940d00432750902081eb508198c16a5a6
-
SHA512
5df0640fc28f489aec04bdefb0dca6eabc7a150465e9330a650005ff480290d2a597a0a0ad9b47cfd06909a8d4479793c89cd8372f70efa5fbdb8ad0a500587c
-
SSDEEP
384:bHeA+vgs9mBT8hOUVA3GNnxJSmJG1olHVWYt6h4akMHtIG7A0SGlrjZ+bRNVstt4:beAi59msfnvlSv7+gSGl81MbylL/p9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e158f863a2d3ebbb83f8b81634544918_JaffaCakes118
Files
-
e158f863a2d3ebbb83f8b81634544918_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE