Static task
static1
Behavioral task
behavioral1
Sample
eb1166c61f0f6cd35b030aca48df2b03_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
eb1166c61f0f6cd35b030aca48df2b03_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eb1166c61f0f6cd35b030aca48df2b03_JaffaCakes118
-
Size
75KB
-
MD5
eb1166c61f0f6cd35b030aca48df2b03
-
SHA1
8edc2b6589e27ff92269702eb96b4910203fb064
-
SHA256
f65b31093097f78e950abff8264f28ff4ee8686fd0e9af3d4282d0010a63e0b0
-
SHA512
d0937c32343d7426c2de6e0603e7d86a8b42f60c7a96f8e8ee8ba14ed4900f8eefd74410f0b23b0d77f5356c9f1439e36f701ce08444c91a86ae2bcf3f80f80b
-
SSDEEP
1536:HCHWYZ7wXfJ6HZV4DRReWVFa5rc0Ben2zoe7vS0WmfDfl:iHWYJwEQDRReWVFaFFvzLS0Wul
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb1166c61f0f6cd35b030aca48df2b03_JaffaCakes118
Files
-
eb1166c61f0f6cd35b030aca48df2b03_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 65KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE