Static task
static1
Behavioral task
behavioral1
Sample
e1e1aeec765e6a5e69219e7d91c9d218_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1e1aeec765e6a5e69219e7d91c9d218_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1e1aeec765e6a5e69219e7d91c9d218_JaffaCakes118
-
Size
1.6MB
-
MD5
e1e1aeec765e6a5e69219e7d91c9d218
-
SHA1
6d0ef2e41708545f2834a741980c84d1c9030e88
-
SHA256
58ae11f3c52578d5d3ae772dbfeb4769ac2a7c8b306618f6e8d5166d72a31623
-
SHA512
bc8007eb16c6e609f5c1b919d046b19b59254d31d5dd03a44bfc994f86c79f3d69a713df6df8761b1f78b3a57c9a47acb443341c70514152a3c851afb71edd80
-
SSDEEP
49152:+rxBTaMb6kbndXLcW/jrIjTkrd+769NQU03tDVXasiCCEuE7c:+LTOmndXgW/HQTkrE7696hVqyCbEI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1e1aeec765e6a5e69219e7d91c9d218_JaffaCakes118
Files
-
e1e1aeec765e6a5e69219e7d91c9d218_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 775KB - Virtual size: 775KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 873KB - Virtual size: 873KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ