Static task
static1
Behavioral task
behavioral1
Sample
eb390cb81b3ec509e2db0c4ab3964396_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb390cb81b3ec509e2db0c4ab3964396_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eb390cb81b3ec509e2db0c4ab3964396_JaffaCakes118
-
Size
40KB
-
MD5
eb390cb81b3ec509e2db0c4ab3964396
-
SHA1
10dae46ac0452663be8bfc461e72d5eb4e9e1397
-
SHA256
d1a3fee43f7c69cff3a6401d0ec704185534adeb36c1a701b0ecd8424b2263b3
-
SHA512
04c64e5c8eaa33f1aca7f2f48556a7fbc7bd4d6f4e4be8edf4796a7413c12af360cdc1ca4d7413c2b3f5f74ae8a869c597ff273902b66e4a8f4937c28136a1a0
-
SSDEEP
768:aq9m/ZsybSg2ts4L3RLc/qjhsKmHbk1+qJ0UtHj3+Zl:aqk/Zdic/qjh8w19JDHjY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb390cb81b3ec509e2db0c4ab3964396_JaffaCakes118
Files
-
eb390cb81b3ec509e2db0c4ab3964396_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ