Static task
static1
Behavioral task
behavioral1
Sample
02efb3ae81fb4865a5d0ea37ab02f227_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
02efb3ae81fb4865a5d0ea37ab02f227_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
02efb3ae81fb4865a5d0ea37ab02f227_JaffaCakes118
-
Size
55KB
-
MD5
02efb3ae81fb4865a5d0ea37ab02f227
-
SHA1
3177cdcf0d6ffde738b20ba2c4daed233b6397f8
-
SHA256
ec72112778f305bb31f03429adc3a00ce67b5f1956ca88e152c524dad81394f3
-
SHA512
719c3c6c72fce5ffdad8b41eae94977cd577a7fe881f6dbd4c2c17fe40093020cf7b4759de3bd331deae0f937bec0b67c6018b634c48ab83d1f51935689cee38
-
SSDEEP
768:cCZAbu4N/pmTgnY8ls5GYdswYLveiwrW7IRVpopdaNFJGa8qPcUblGWt:3s/psfKLveiUj+UgapkUblGW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02efb3ae81fb4865a5d0ea37ab02f227_JaffaCakes118
Files
-
02efb3ae81fb4865a5d0ea37ab02f227_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE