Static task
static1
Behavioral task
behavioral1
Sample
ea33a0028371a8619aede7a0e3b7b116_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ea33a0028371a8619aede7a0e3b7b116_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ea33a0028371a8619aede7a0e3b7b116_JaffaCakes118
-
Size
21KB
-
MD5
ea33a0028371a8619aede7a0e3b7b116
-
SHA1
3b07a47b720d038d9b372eff7d61b06accf0e081
-
SHA256
570a6372a79368ccc0f8106f4e6f52da1537d0f056dc1efde1a116aff2c729f7
-
SHA512
35d07f16dba2296bb477a03882fb115dd36aaabd03e52e1f3f7941c13093e7c69b83cb8c1e9bde580050f469286cb7756b249d8a8c468dc92f6f1e0b35b4e035
-
SSDEEP
384:stxvdPs0NI/W5odH5EjZY8AfMGwrHSgWI6/LU8gwxIzPg+YgpNRNPKoPZFBvmc:stnJodH5kZfAlwDSgWu8gFpfpNSoLB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea33a0028371a8619aede7a0e3b7b116_JaffaCakes118
Files
-
ea33a0028371a8619aede7a0e3b7b116_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�h��t��� Size: - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���;� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE