Static task
static1
Behavioral task
behavioral1
Sample
e20d249b727cd29f22869acb8fc7f52e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e20d249b727cd29f22869acb8fc7f52e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e20d249b727cd29f22869acb8fc7f52e_JaffaCakes118
-
Size
94KB
-
MD5
e20d249b727cd29f22869acb8fc7f52e
-
SHA1
732de9f67d109daad9726181efe24a961c817794
-
SHA256
e6814ab1e1fcbf914d46adf0c771b6dfaec6b8db9cb6e84ac7b146ed837a0338
-
SHA512
27027d6d2ec9cd28c9f2df77304b01076a2b027141b118bd27fdb5f4d58c933428b36ade5907e90e335ae8f45776b20d5a80e8a664b2536bd3fe8fc75e1fbda4
-
SSDEEP
1536:TP6+ck7rHC03xw+QQ38RIkgVZKjJU+V6j9lBd43g2rdrtCtDo1P734i6xWJ8CmUp:TP6dk7rHC0Bw+hsBIOV3HZQu1PqMmO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e20d249b727cd29f22869acb8fc7f52e_JaffaCakes118
Files
-
e20d249b727cd29f22869acb8fc7f52e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.qdata Size: 512B - Virtual size: 181B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1001B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.odata Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ