Static task
static1
Behavioral task
behavioral1
Sample
e1e0683e93e592bca063a8124b982b08_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1e0683e93e592bca063a8124b982b08_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1e0683e93e592bca063a8124b982b08_JaffaCakes118
-
Size
684KB
-
MD5
e1e0683e93e592bca063a8124b982b08
-
SHA1
6473e48cbafdb8cf4655a3d6589ec6d25faee9d1
-
SHA256
4abdd715ebf37dc1f981492572e260d84a526a415e6c2690d853e17d4c094f2b
-
SHA512
a8e23ba478628ca3d83dcc5b92608b9500522f0528b274dbb2ea0030450de6ae369edfc111573d7bbbc3b5108822884b7a9cd7dfe52ccf5d603cdd4ff3df5c7c
-
SSDEEP
12288:w3V5xKUSSkKCcNm9qsDfhy1WA+falcxXHxssUxPi8QU94/MKn6uGBgFR9:wlr7Smjs4wA6alcJUPV994kQ6uGBgFR9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1e0683e93e592bca063a8124b982b08_JaffaCakes118
Files
-
e1e0683e93e592bca063a8124b982b08_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 678KB - Virtual size: 8.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE