Static task
static1
Behavioral task
behavioral1
Sample
eb2436f44da5ba94e52e950e9796c837_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb2436f44da5ba94e52e950e9796c837_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eb2436f44da5ba94e52e950e9796c837_JaffaCakes118
-
Size
23KB
-
MD5
eb2436f44da5ba94e52e950e9796c837
-
SHA1
6748ab91a40faa51e154cec977393e01e5576cbc
-
SHA256
990490124ffbc72bda88c42c8cf151326a66db05d8aef0aa9e491acfcab8fcb7
-
SHA512
53dac25a8c8f28db92a548ea1ebcdf68a2bed947852a0c166cdcd7867142b8254b2977729fcbcf58a658bef6af049afe7549b27d7706c6c8cfde01318dd1260e
-
SSDEEP
384:6QoKD7bKaoBKDxeVPXpPWMU6Da2KvkZMUEYvwYT8N4Zv8nfkIFJJX7eJdXd273FZ:ZBBEfpPWaDZKmMUEYvwYFZfwh7yU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb2436f44da5ba94e52e950e9796c837_JaffaCakes118
Files
-
eb2436f44da5ba94e52e950e9796c837_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE