Static task
static1
Behavioral task
behavioral1
Sample
e9e86603b7d13b3da6fb051356dda48a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e9e86603b7d13b3da6fb051356dda48a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e9e86603b7d13b3da6fb051356dda48a_JaffaCakes118
-
Size
100KB
-
MD5
e9e86603b7d13b3da6fb051356dda48a
-
SHA1
80e4078db7d57a593a64be6831346e6a9063e757
-
SHA256
425cb8595075dc229ed44f2629a1c59ee071dfce334014257754d71d5b34a823
-
SHA512
4980f4db0bd3135f092387014fcd8a890e4d70618267dd5d13806a6be129f2cc50a41120cccf9f45db4abab5878a5eca0a5566f0822339e45c70ec019eca3364
-
SSDEEP
768:5s8Z9mbGUV4jVivEai9DniyQIchCHsLrvZLugKyOnHL1aNMxi8afJp3j:hmbxajP5nRpchC0bUgKyCrEYyBxj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9e86603b7d13b3da6fb051356dda48a_JaffaCakes118
Files
-
e9e86603b7d13b3da6fb051356dda48a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 315KB - Virtual size: 315KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data6 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data5 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data4 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data3 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ