Static task
static1
Behavioral task
behavioral1
Sample
eac84c4b42df7d5eda8e7f23085d67b3_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
eac84c4b42df7d5eda8e7f23085d67b3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eac84c4b42df7d5eda8e7f23085d67b3_JaffaCakes118
-
Size
127KB
-
MD5
eac84c4b42df7d5eda8e7f23085d67b3
-
SHA1
7ad8d79b8225b98db83fc9003e37c074a0c0dce1
-
SHA256
02e55825002d17514b6fb4fb8ac1c632a367f38dcb1f0d69ec948fb127c30d96
-
SHA512
6f1793fdd60489fdde5ab5dae0af164e60022836df98da9ca32b95d9349637f11756a26b3ea3fb8c523cf82cadfc2f3e6ef38162e18aaa1513f633b288b1de79
-
SSDEEP
3072:1JMGaWXa0+9na0FF53u2yHT6ji3GdOsR5:v7bXZ+9a0FFcJHT6ji3GI4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eac84c4b42df7d5eda8e7f23085d67b3_JaffaCakes118
Files
-
eac84c4b42df7d5eda8e7f23085d67b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
x9c6or0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x9c6or1 Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x9c6or2 Size: 360B - Virtual size: 1018B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE