Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_e2d4c3b2422550ecdc03f279c139b9aa.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_e2d4c3b2422550ecdc03f279c139b9aa.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_e2d4c3b2422550ecdc03f279c139b9aa
-
Size
166KB
-
MD5
e2d4c3b2422550ecdc03f279c139b9aa
-
SHA1
c20d7a7ba6f4a1b92c403e77f3915c10ae90b967
-
SHA256
22dc8fd6075cc4b0493350eb72972a9f48cda98bc10c81a779e74565c877e2ac
-
SHA512
5313c40779bec1f38f55119dd0d7839d46dfd61518cfa1b472a51e2311e14106a5f9d932bc6a0b8d09978e83784953c27aad86eda0474807f3cabadb46bbff43
-
SSDEEP
48:OEPmi3ch6FGG2mecjFBEVhaoSbYAeb7Erw7HlaE:nPmEc0ecjFc2eL7Ht
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_e2d4c3b2422550ecdc03f279c139b9aa
Files
-
JaffaCakes118_e2d4c3b2422550ecdc03f279c139b9aa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mac0 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mac1 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mac2 Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 530B - Virtual size: 530B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE