Static task
static1
Behavioral task
behavioral1
Sample
ebbf5f1f6f6cae1fb6487d3577739449_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ebbf5f1f6f6cae1fb6487d3577739449_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ebbf5f1f6f6cae1fb6487d3577739449_JaffaCakes118
-
Size
17KB
-
MD5
ebbf5f1f6f6cae1fb6487d3577739449
-
SHA1
b9afdbf04d1ad0bf7b4c07a526265b61b9e41dac
-
SHA256
9334eae5a2ff8653e196f1d4fecddd467b5add616b7326bee8ee3a3c096907fb
-
SHA512
707c2f38a54adf094d0932dda6b283532cd40a77a38e51e9e104a0083ba378b845b172eab049845e1235c44ced1676af7641110a06f0990728172c1c7b87d2e4
-
SSDEEP
96:mQrtbwnvB4KJISPXIZgDiBTmorNCJBmbpH3Tz6FHcS0ev1z6G:mQBwnvBdf/IuDi1FZCJ0bpH3qaS0evMG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebbf5f1f6f6cae1fb6487d3577739449_JaffaCakes118
Files
-
ebbf5f1f6f6cae1fb6487d3577739449_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 998B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE