Static task
static1
Behavioral task
behavioral1
Sample
e9f0ae3e177ffabd7e6dfccdf630c9d2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e9f0ae3e177ffabd7e6dfccdf630c9d2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e9f0ae3e177ffabd7e6dfccdf630c9d2_JaffaCakes118
-
Size
628KB
-
MD5
e9f0ae3e177ffabd7e6dfccdf630c9d2
-
SHA1
2e98fe8df3881961ac3f2009284cf53132465a36
-
SHA256
0a3b52c91cdb5ef160411954ec3197f6ac5910ea93e694de6f359b35bfdb2915
-
SHA512
4b1fec5f891fcec6290080ac4a08725229ae39e9273b172619290f2676a0576bb02f59389e7573d30e99f8fd0581f3abd9e8604a389a7fa12b0008808442f7d7
-
SSDEEP
12288:fA6+jYfCuwH8ick58hYeWm9XsLJgH2Zr1OM5DBK:46+jYKuwc/wJgWZr1O9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9f0ae3e177ffabd7e6dfccdf630c9d2_JaffaCakes118
Files
-
e9f0ae3e177ffabd7e6dfccdf630c9d2_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 411KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE