Static task
static1
Behavioral task
behavioral1
Sample
e1b3a1c4c63c0718625ac62ffd6cf6f8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1b3a1c4c63c0718625ac62ffd6cf6f8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1b3a1c4c63c0718625ac62ffd6cf6f8_JaffaCakes118
-
Size
331KB
-
MD5
e1b3a1c4c63c0718625ac62ffd6cf6f8
-
SHA1
3759602346b3fa4053645a1dfe602ecafefa8b74
-
SHA256
6a8184883351421b4b26ff76afe2cfc927d53829e8091ccec5eb823f69a7b434
-
SHA512
dd1558b7f11166001535c3fc3b4aeecd9b8c11036999cfad817d7182ff9f85bc7fe2f429cd007182c6faee5a72b8598e7566383416be64de150f68d9ac108262
-
SSDEEP
6144:C7n8e09EbGWF5ZeqeyMbxNR9ykd63QMUMZSrTh98gWNlPTGQQm6agrdQ:an6yPF5MyIxNR9ykd6dwUNtTird
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1b3a1c4c63c0718625ac62ffd6cf6f8_JaffaCakes118
Files
-
e1b3a1c4c63c0718625ac62ffd6cf6f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 97KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 46KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE