Static task
static1
Behavioral task
behavioral1
Sample
e9c25ffe00f149fd86ff1c21e8d9d1b2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e9c25ffe00f149fd86ff1c21e8d9d1b2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e9c25ffe00f149fd86ff1c21e8d9d1b2_JaffaCakes118
-
Size
26KB
-
MD5
e9c25ffe00f149fd86ff1c21e8d9d1b2
-
SHA1
b0415b41d461a7948c4c93ddcce3bd903a2e84e6
-
SHA256
4537387c57a54c6772f56d62a3bf29edf0742263724bc32852ee40b0616651ff
-
SHA512
b27dba19221997ff50175f6c9c915c29a4bcf9940220bfdef75a946e3304c6f6017d0966b51e84bf43e3af2fb384044abe1b6713cd89b9ca7f79d766e635e8db
-
SSDEEP
768:cyzObk+qXu8WEsHgKOJRIXbmm9oCNrgQo4:56Ab+8WEagRIrzoCD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9c25ffe00f149fd86ff1c21e8d9d1b2_JaffaCakes118
Files
-
e9c25ffe00f149fd86ff1c21e8d9d1b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 874KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE