Static task
static1
Behavioral task
behavioral1
Sample
e5511f66c401aff9484e90b33838cd27_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e5511f66c401aff9484e90b33838cd27_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e5511f66c401aff9484e90b33838cd27_JaffaCakes118
-
Size
143KB
-
MD5
e5511f66c401aff9484e90b33838cd27
-
SHA1
d8c3cef75c579af88fc74e380a9c638080bff194
-
SHA256
d6c0c31207484946e1f8ec1fa205a5c3cb2370d15a52638e443a10ebcff81b03
-
SHA512
3962176b8434ed47b83496b6a4d29e5058c1efb214aab3baf0cd901037cc356ce2654fb3ad9b9a5d457e56f233a2fb73bf55f211a0b0ea456591d81fe09a8148
-
SSDEEP
3072:Xy6VEplSZ5n4E96x8emnvGlKXTy5gR4JRMdLsi:HVEqZH6MFk/E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e5511f66c401aff9484e90b33838cd27_JaffaCakes118
Files
-
e5511f66c401aff9484e90b33838cd27_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE