Static task
static1
Behavioral task
behavioral1
Sample
ebdc609aed2740ab5fd25ff398e93f1f_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ebdc609aed2740ab5fd25ff398e93f1f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ebdc609aed2740ab5fd25ff398e93f1f_JaffaCakes118
-
Size
1.1MB
-
MD5
ebdc609aed2740ab5fd25ff398e93f1f
-
SHA1
d28c69d402412e9c0adf27f47b015027620997d1
-
SHA256
d4797c104f9ad43427a1258843daf9e5aeae7403001c086195787be836aab65b
-
SHA512
70627e75627125e54cbcfa123b75606d292b0f9fb513d4c61f8e9ea3baa0dbb79291c819c1577dbca337d3303b876712c5c361d26ed26bdb403029ceafb57606
-
SSDEEP
24576:KatO2+F8oYna0aD3rkulYtVjHENXxF0ZeY:YVQojms0t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebdc609aed2740ab5fd25ff398e93f1f_JaffaCakes118
Files
-
ebdc609aed2740ab5fd25ff398e93f1f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 320KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 600KB - Virtual size: 597KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ