Static task
static1
Behavioral task
behavioral1
Sample
edea9e274dc8290fe1cbff3d3efef2f3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
edea9e274dc8290fe1cbff3d3efef2f3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
edea9e274dc8290fe1cbff3d3efef2f3_JaffaCakes118
-
Size
375KB
-
MD5
edea9e274dc8290fe1cbff3d3efef2f3
-
SHA1
54218bb23d61a1b32a2cd4010677e4e52d94a435
-
SHA256
c7d6bde840aa43bb101d9c989d3b14d11da7f42410fdf21ece62ce44506e1a07
-
SHA512
dbe39d2535fad54518c47611098ea9322e424f37040d02c8059317d9960962366731de28de28244c85d9d86a1b4a9beeb924780211ea7699e8075763f745a08e
-
SSDEEP
6144:XkqRhic89EeP87fSsi2OCv4RT4At6OaArF9lN6bTmhsGHGFS2/DToJ/CFMEg/RpR:Uq6jifC9kc4qhNsJGoSaD0JSMEgp++oS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edea9e274dc8290fe1cbff3d3efef2f3_JaffaCakes118
Files
-
edea9e274dc8290fe1cbff3d3efef2f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 368KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE