Static task
static1
Behavioral task
behavioral1
Sample
e247896798bd80876f5442b9db873045_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e247896798bd80876f5442b9db873045_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e247896798bd80876f5442b9db873045_JaffaCakes118
-
Size
9.6MB
-
MD5
e247896798bd80876f5442b9db873045
-
SHA1
22876ce17b7a931c5c0b0d87c760dd64fd1e5638
-
SHA256
1d3539effb82a8ea958c85f4f73f430c096a32bdb1a33dd423074bb9718a5ecd
-
SHA512
11695578eeb99b400957265146494f05b2c965e1ced120e12b5191ad02ef3914f3b9bfef2da949dfe7f675f1c89244b6928f65010e4882f7f9419ed6e24709a7
-
SSDEEP
196608:5SCXGjoBMht1+VsWqjmX3GlF81rCwy4PiBJfkPZwyGTEtU:0CXGs5qjS3Gm+wZPiBJfFyTtU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e247896798bd80876f5442b9db873045_JaffaCakes118
Files
-
e247896798bd80876f5442b9db873045_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 226KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 38KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 657KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 448KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dat Size: 701KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE