Static task
static1
Behavioral task
behavioral1
Sample
eb283c46e563b407985cca4a6c76754b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb283c46e563b407985cca4a6c76754b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eb283c46e563b407985cca4a6c76754b_JaffaCakes118
-
Size
111KB
-
MD5
eb283c46e563b407985cca4a6c76754b
-
SHA1
4ff7a7106485863d4e564f192cc9b82656cbf34b
-
SHA256
5c03af5f78bc96e5670e9986b83581556c1b3e167d9c6b30fe03e03a56ef1c98
-
SHA512
89a5dab9648316231d06d7f2c732f689a08361239fc0167383c11247305518b2c3396588eb55c4521e5a7735884a6e79be15535bf494333d1e65b0da0e1b29d7
-
SSDEEP
3072:3d11v/iiLbGHWYmfMqm+vJnOCYme/LPDbB9zbT:xvasbGXEMqmQpYme7fXv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb283c46e563b407985cca4a6c76754b_JaffaCakes118
Files
-
eb283c46e563b407985cca4a6c76754b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
z Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
k Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mi Size: 160B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE