Static task
static1
Behavioral task
behavioral1
Sample
e2429fb73fa32ef1fa0a0b56bb7ab109_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e2429fb73fa32ef1fa0a0b56bb7ab109_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e2429fb73fa32ef1fa0a0b56bb7ab109_JaffaCakes118
-
Size
77KB
-
MD5
e2429fb73fa32ef1fa0a0b56bb7ab109
-
SHA1
2f9aa2f93e9ab890d3467b011740a2a23c2a85f6
-
SHA256
5bbbfc75d96da2a65c335d76cd7edfc5e816f3d50c202bac5f6a87b7a2f45a9e
-
SHA512
025c8355782a624957b5ef3a921aa542de6c9e0227abbb4cc8828226249df7df1055f514f830d3986452741ea24989349b58fc1cde2be7914486ced6f994b701
-
SSDEEP
1536:KL7jrp+swCmE6gGOpBrJPk9em5shgRrxiq3sdNeSR5sscVWgN:gjrpynOXJPk922Nh3szeOcVh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2429fb73fa32ef1fa0a0b56bb7ab109_JaffaCakes118
Files
-
e2429fb73fa32ef1fa0a0b56bb7ab109_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 188KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ