Static task
static1
Behavioral task
behavioral1
Sample
ed4518f4827d338c83563f5382f59fc8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed4518f4827d338c83563f5382f59fc8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed4518f4827d338c83563f5382f59fc8_JaffaCakes118
-
Size
24KB
-
MD5
ed4518f4827d338c83563f5382f59fc8
-
SHA1
5b44ab8c3ff31a3ac76d1903579264b47fc56e4d
-
SHA256
7dd3967ec0c1139144bdd73532d01d4ec9d42d07a7d609c0f70acde564396834
-
SHA512
73c814cfb20d4fe2fb2e1397eca965a20dfe89625abbc835462d30d63317be5d8a16d2b798d4da5d246d07ec7ba326f59e0988395d3f004a4500db6627cde4b1
-
SSDEEP
384:sKplLZdbP1Q0LmbIbIPZoW1kS6xgp5VSFLseEFpJuPEt+ZJ4G/T0:ZdbP1QDIbIq2Z6o5VWseEFpQZ6i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed4518f4827d338c83563f5382f59fc8_JaffaCakes118
Files
-
ed4518f4827d338c83563f5382f59fc8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE