Static task
static1
Behavioral task
behavioral1
Sample
e1c7455d142b6a7c9bd9f6450532615d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1c7455d142b6a7c9bd9f6450532615d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1c7455d142b6a7c9bd9f6450532615d_JaffaCakes118
-
Size
85KB
-
MD5
e1c7455d142b6a7c9bd9f6450532615d
-
SHA1
0c30be50030d9bbf3db5ce816e937e3d8f681f33
-
SHA256
35d5986c980cb831c409661b309a809db53f9ee7cca0b16bb291bb2f017d7cbb
-
SHA512
5d3eb5925c23739e6f88cbf45ab91922b3de06abbda909d1d2a89f5410ae7b980e6aa7abc83c9d420df07cc9da5dbeade7eca8e7ca82977e165e16b8c65cc417
-
SSDEEP
1536:sJ3x7wIzKRfqElGg3Uq0B66BeZ7IjFU5jatr0uvpW2QZw3PXg6E5e6H7:oD43GuG6TaF4jaZzRWNZw3oA6b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1c7455d142b6a7c9bd9f6450532615d_JaffaCakes118
Files
-
e1c7455d142b6a7c9bd9f6450532615d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wkt0 Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rcep Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE