Static task
static1
Behavioral task
behavioral1
Sample
eab7b847b21e1d8e6b590d6ba5d6cd33_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
eab7b847b21e1d8e6b590d6ba5d6cd33_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eab7b847b21e1d8e6b590d6ba5d6cd33_JaffaCakes118
-
Size
33KB
-
MD5
eab7b847b21e1d8e6b590d6ba5d6cd33
-
SHA1
cb662cbd4d6f5ba9406d5018bcb1b98b31370eff
-
SHA256
0ac6af6b116a5ef1aaabafac1923bfa5d7ef64fb039dbc39a9f858faa4efa401
-
SHA512
fec01484ba86f8023d072e10b5bcdae340582b94c71f068cd77319180ac43d5fe93a19ef9e76d95df50b1a43e20a18d3a0d714ec8e1d8ac0fe5f4994970bb6b5
-
SSDEEP
768:veETYM/cQBUKUdPcrFiFWG76ZOfdz2bD1m5b:vrEr8Kk5izGCzmD1mp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eab7b847b21e1d8e6b590d6ba5d6cd33_JaffaCakes118
Files
-
eab7b847b21e1d8e6b590d6ba5d6cd33_JaffaCakes118.exe windows:4 windows x86 arch:x86
c9d1ce422131a1ba6a69425bf50b886c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
GetVersion
Sleep
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 166B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ