Static task
static1
Behavioral task
behavioral1
Sample
e8b28032eea46f3d4b74e6e27f8d7622_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
e8b28032eea46f3d4b74e6e27f8d7622_JaffaCakes118
-
Size
1.3MB
-
MD5
e8b28032eea46f3d4b74e6e27f8d7622
-
SHA1
3ef7ee9b822ed8f99d2a7b7cbb2b9f0be3ab2626
-
SHA256
dee74e1af1cef5ae7784045f1084c0c622e9e43ea0f30d9a0be22f4b833e0c6c
-
SHA512
600b27743f03445642de57fed79dc662028e4709dae246f4bdb8efcef1623be45c23280749ad02a74ce251530745224067436e689a84eef30f9e192059ed5231
-
SSDEEP
24576:3WrwQIz+8407Cd5ymLgWBgk8c3jijLoxTn2iITkMBo7ionJ:mrlIoO6kmLg6kc3+Lo92i00
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8b28032eea46f3d4b74e6e27f8d7622_JaffaCakes118
Files
-
e8b28032eea46f3d4b74e6e27f8d7622_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 32KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.doktr Size: 608KB - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.str1 Size: 644KB - Virtual size: 644KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE