Static task
static1
Behavioral task
behavioral1
Sample
e1e9d4fcaaccf73018565769628ed202_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1e9d4fcaaccf73018565769628ed202_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1e9d4fcaaccf73018565769628ed202_JaffaCakes118
-
Size
356KB
-
MD5
e1e9d4fcaaccf73018565769628ed202
-
SHA1
46f37291d8ea590bdc3d7c564c97ff1c5daa2435
-
SHA256
27eadd546eb762a3ef807db74eec78e2ccfb7da7d242a19cfd687c7ef577d434
-
SHA512
6449490975249f22cfdad3f00735779abb247b22e57850cb57744535e4507a73c92083183aea8fede2b29add9f7dbf34f0eadc414785fef1d8ab50dc74281040
-
SSDEEP
3072:VACO9BCqsGxxeq/qU7raAkFksaME/GSpnIgGbswpJoNIQzeeeeo4/QMmoNfuFG5+:VA1nIgK54IQzeeeL4/QcNfNjX88A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1e9d4fcaaccf73018565769628ed202_JaffaCakes118
Files
-
e1e9d4fcaaccf73018565769628ed202_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 296KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ