Static task
static1
Behavioral task
behavioral1
Sample
e17e1123e60426e15ce7deb6d3f877dd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e17e1123e60426e15ce7deb6d3f877dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e17e1123e60426e15ce7deb6d3f877dd_JaffaCakes118
-
Size
48KB
-
MD5
e17e1123e60426e15ce7deb6d3f877dd
-
SHA1
d18963aef4f39c72bd4d815266b4e44d8dcafe00
-
SHA256
7dfd2b7f02a9fa46c056e1bc45bf9b72345a39813ed1125c85408569a4899527
-
SHA512
7ed36a731190b7ad6d46ed281fe576cc64f3a3f32f79817b61a75d892aa7eb7d2d4e9ccd342aa68097490654ea76c69a776c8e24714222340c087fa9be44a50a
-
SSDEEP
768:KfV+R/YGgFmLz4q/CvZzG7Gci3YShFjOeqAC7M0fbQtYJ+uHzx6nZtCMb:B/YgLzWZS3+hFjUbxbIY8uMnZYMb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e17e1123e60426e15ce7deb6d3f877dd_JaffaCakes118
Files
-
e17e1123e60426e15ce7deb6d3f877dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
AAAA Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
AAAA Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
AAAA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE