Static task
static1
Behavioral task
behavioral1
Sample
e43ee351a7e0172dba63ebd5608ddc0b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e43ee351a7e0172dba63ebd5608ddc0b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e43ee351a7e0172dba63ebd5608ddc0b_JaffaCakes118
-
Size
266KB
-
MD5
e43ee351a7e0172dba63ebd5608ddc0b
-
SHA1
8788eac3f52a2428c91c9343f80a688361ef89f3
-
SHA256
825a372fd4302d2ef94d829cd91fcc94eef1e6cdf5fb4fc7eb44dac5733c85cf
-
SHA512
b7545ee1d8c95895d224e3423c27eee7cc64f268afbba44a265077078fe5c3b72897f8b33f689064703c95ac17982a208b9f06ee904b0cb4b103778a72a55d4a
-
SSDEEP
6144:CivB0mnf76HZEGUWMWU3ayxJKuCkh/xJkD8ol4Rj2BuQe4UTdX:pmmnfuu/BWobKuXhEd4Rj2BOdX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e43ee351a7e0172dba63ebd5608ddc0b_JaffaCakes118
Files
-
e43ee351a7e0172dba63ebd5608ddc0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
�H�#0 Size: - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�H�#1 Size: 265KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�H�#2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE