Static task
static1
Behavioral task
behavioral1
Sample
ed28b298388fb7fc008e3cd53cd10ac4_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ed28b298388fb7fc008e3cd53cd10ac4_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
ed28b298388fb7fc008e3cd53cd10ac4_JaffaCakes118
-
Size
32KB
-
MD5
ed28b298388fb7fc008e3cd53cd10ac4
-
SHA1
a4b6e6fae07b1c751344ee6d17e0feac59f420e5
-
SHA256
ebcd32d6cd5ffa1c404fc82df17ba0056f7b0a6efe8d2af75fd60073cbdf5b2c
-
SHA512
54212e795dfc0ec987d7fbfbb550a68384a08d5cd947e8d9099d8546377e37077caf99c5d26cbcdc8a63216ac4eaf87aaf88c33764daddcdbe6a12b7e37b2f4e
-
SSDEEP
768:cO4oU7bLracBHDN/oLxa6pMCdat2JwljX3JH8UjejX:jYScBHD1cxa+fdHyXPejX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed28b298388fb7fc008e3cd53cd10ac4_JaffaCakes118
Files
-
ed28b298388fb7fc008e3cd53cd10ac4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 264KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
p0ly Size: - Virtual size: 1B
IMAGE_SCN_MEM_READ