Static task
static1
Behavioral task
behavioral1
Sample
ebca285427b998e95c3028fd2e67dbd5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ebca285427b998e95c3028fd2e67dbd5_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ebca285427b998e95c3028fd2e67dbd5_JaffaCakes118
-
Size
242KB
-
MD5
ebca285427b998e95c3028fd2e67dbd5
-
SHA1
4ba0fce2260298fd8c096fb04785720884b12d1d
-
SHA256
ad7510d38932ee538b0b4f8c25efa84144a36c8ba7fffa5c66e11310fe424086
-
SHA512
7429b6ca3662874763994177742b28813258ae6549df95d3c7333ffbadada91084c3e812fa9e19e0cfc8945ef8e7887b7322e2783e510f14befeb9341e8fccad
-
SSDEEP
3072:1yOqThp9pKa4CeuJHU9/UTqThp9pKa44VOvWM/EYRP8AitFNbk0d8vHga/GP:QJL9BReIsL9BpwWM/XeN+AQi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebca285427b998e95c3028fd2e67dbd5_JaffaCakes118
Files
-
ebca285427b998e95c3028fd2e67dbd5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
saaxsxa Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 179B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE