Static task
static1
Behavioral task
behavioral1
Sample
e2928acf4fb8653989417ed131e4bb45_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e2928acf4fb8653989417ed131e4bb45_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e2928acf4fb8653989417ed131e4bb45_JaffaCakes118
-
Size
609KB
-
MD5
e2928acf4fb8653989417ed131e4bb45
-
SHA1
c6721158da690efdf498b2f78ef9d64adddbe019
-
SHA256
9095633b80c5c686c9798d899510a7d74207f1aead99889d5128e4ffb591e6ec
-
SHA512
ad0dd1cf5db1beca45dd9bb60bb8ac54db116cf0ae08f4d7cfb6ab9d2e025f86ae514bc9ff9c8f1cd6874121603ff4b6e2e1b1affd02a4545b54f6d9f0772f53
-
SSDEEP
12288:bWpDejLEijXX+SkcB48CCdILOO5Q7qJnGt+yc24JROnmXwtYmwT7KZu:bcSjLZXX+uBnlmD5iqJHymD2mgtzwn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2928acf4fb8653989417ed131e4bb45_JaffaCakes118
Files
-
e2928acf4fb8653989417ed131e4bb45_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 780B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE