Static task
static1
Behavioral task
behavioral1
Sample
eac771983019e249e01b9b0143ab3463_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eac771983019e249e01b9b0143ab3463_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eac771983019e249e01b9b0143ab3463_JaffaCakes118
-
Size
512KB
-
MD5
eac771983019e249e01b9b0143ab3463
-
SHA1
d61e64722d1450f40cf2859f1e9cb11fe8e16dcf
-
SHA256
0207dfb227f0a16b852325ef7c1c93a16439222dd43c1d88a44c51d0421ffb77
-
SHA512
5c5f960f31d9c677db2a5c52f5f18b8d4e97b0f90b2946d6cd4bb2c54d848cc219d7f523a25a72c081dff83973454a8090cc42c74a9f64c7c85bdc87dd84912a
-
SSDEEP
12288:IHg5khYDcZp+SW3p3lLAUAJsS1u8ptIpNIUL/Oh07M:oqDcZ0Sop3lLATJsS1u8bIv57M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eac771983019e249e01b9b0143ab3463_JaffaCakes118
Files
-
eac771983019e249e01b9b0143ab3463_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 803KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 246B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE