Static task
static1
Behavioral task
behavioral1
Sample
e5609ea9876aa25372d32b9e612a45b1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e5609ea9876aa25372d32b9e612a45b1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e5609ea9876aa25372d32b9e612a45b1_JaffaCakes118
-
Size
315KB
-
MD5
e5609ea9876aa25372d32b9e612a45b1
-
SHA1
dff0f02d7937e30f974a3ec26480f640b9ee5969
-
SHA256
1cdd9b0c83f366abb77c76badf3d18955388566b9c0c056e50948c14b7f93c67
-
SHA512
3427e897cc04ea3b13c210a899d7fe8559e797ff48ec044c17c234ecc1c981fb40c5ef251f12b89e2594391fb28267872a1094c27262e589f74b2acfbd0ed717
-
SSDEEP
6144:p0nP9UROSy/Ydh+1Q+QstWz81UWjLleZuDeu0qSSqFX9MidwpzknzC:mlUgSyahMQBUWtuLl3x0qSS1iuzknzC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e5609ea9876aa25372d32b9e612a45b1_JaffaCakes118
Files
-
e5609ea9876aa25372d32b9e612a45b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
PEBundle Size: 512B - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEBundle Size: 314KB - Virtual size: 331KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE