Static task
static1
Behavioral task
behavioral1
Sample
ea9f5b0abff2b66050485bc8d527c8fa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea9f5b0abff2b66050485bc8d527c8fa_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
ea9f5b0abff2b66050485bc8d527c8fa_JaffaCakes118
-
Size
993KB
-
MD5
ea9f5b0abff2b66050485bc8d527c8fa
-
SHA1
9229a704eaa461810fc4c96b8015a2d4cbab9d3e
-
SHA256
c8df8365e63bc6accf85e57c996499cc75305fe36ea17ef820188780f9d05878
-
SHA512
677fce7cd533d76ec09fe85e0589a0989255c066595596c4ba1e60858fdbd53d9df606914e36cc303c7cb214f8d31809bd704f949c5f1d1b3986badc2eb7d6a0
-
SSDEEP
24576:Uhh3oZbcFwWQIVcIgPXcUgeUvVLljyTeGP4LHMZKZDeDtEBqLZmdkTjT1Hve:8/wICImMJdLlj9SECxwOte
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea9f5b0abff2b66050485bc8d527c8fa_JaffaCakes118
Files
-
ea9f5b0abff2b66050485bc8d527c8fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.CODE Size: 11KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: 501KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 407B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 616B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ