Static task
static1
Behavioral task
behavioral1
Sample
eafbbe99f8c3421810d8359be41470fb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eafbbe99f8c3421810d8359be41470fb_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
eafbbe99f8c3421810d8359be41470fb_JaffaCakes118
-
Size
23KB
-
MD5
eafbbe99f8c3421810d8359be41470fb
-
SHA1
c804018c9928be4c07ef6ee15efc728c7473c88b
-
SHA256
73f9294c3fb053abe3e27c7b9f7f7b3df265e96cc77ffd26adb1f4ec5161ebf5
-
SHA512
b4b8b10b9bda726556a1f0d6484bbf71c7d122cd9eae4672963c59e7ea4c1cf4deb38fa4c69994adf3806843c7cc6b9f7f84eb5bfccfa1fae240216bf2ec2572
-
SSDEEP
384:X5f5WBeOWZCYzT6GOuaDLZI3s+kj3hC7buBim/DrEiqJHS94RH0E/x3knsJQbqwh:pf6ZYP6bDlIHkLhCIrWJyKawuqwrF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eafbbe99f8c3421810d8359be41470fb_JaffaCakes118
Files
-
eafbbe99f8c3421810d8359be41470fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE