Static task
static1
Behavioral task
behavioral1
Sample
eab1cefe547eb1adf38fbee5f0a7bea1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eab1cefe547eb1adf38fbee5f0a7bea1_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
eab1cefe547eb1adf38fbee5f0a7bea1_JaffaCakes118
-
Size
31KB
-
MD5
eab1cefe547eb1adf38fbee5f0a7bea1
-
SHA1
d4bc0ff77c49c207c951c77e9a9b77f9e23f57ec
-
SHA256
d1cbad2eb9de48e67806df737d1828994c12cadc6a1fb57854e04636de864d77
-
SHA512
39a906176c2de0813d014126da0cfa88b9eeb883d86f6cc99f357f70fcc8d6f22620c9b74d83e66d0e5777ca092ea699e556bdc87f54a16086af84cdcea6e79f
-
SSDEEP
768:740TQzlG7S6oWkcdX/wFCt9kuuCJTnMVn1H//5an:bGG7SdCt95TnMVnd/5M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eab1cefe547eb1adf38fbee5f0a7bea1_JaffaCakes118
Files
-
eab1cefe547eb1adf38fbee5f0a7bea1_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ximera Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE