Static task
static1
Behavioral task
behavioral1
Sample
e2446914d02dc3173a6aa2a15a5b3760_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e2446914d02dc3173a6aa2a15a5b3760_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e2446914d02dc3173a6aa2a15a5b3760_JaffaCakes118
-
Size
3.6MB
-
MD5
e2446914d02dc3173a6aa2a15a5b3760
-
SHA1
45b6489b58e5a5fd97c7976739b9b5fbeec559e0
-
SHA256
4925964e7d9970036f6ce4d007181b25c2de7ea728e66b0ff350c3487cdc5f57
-
SHA512
fcf2cf981b16e43309ec16bd6a13427a7bd40bdc9d32270bf5ba2e2212871bc4ae1c4b2d7b1d2eed58eff54c1f903754b6408a650857bdb08f65e3785198bbd8
-
SSDEEP
49152:VitX0i9fJDy3/2hanPKnye3S9ylDOPoh7fVB68CdSkj7udx1ChRxYC70Rarz:29c+4Kye3NBO0BAj7udXkcHRU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2446914d02dc3173a6aa2a15a5b3760_JaffaCakes118
Files
-
e2446914d02dc3173a6aa2a15a5b3760_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 12.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.6MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE