Static task
static1
Behavioral task
behavioral1
Sample
8ebec95fd5e6b0db7a65ac6a250bfc04_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8ebec95fd5e6b0db7a65ac6a250bfc04_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ebec95fd5e6b0db7a65ac6a250bfc04_JaffaCakes118
-
Size
1.4MB
-
MD5
8ebec95fd5e6b0db7a65ac6a250bfc04
-
SHA1
7d87ecd57be5b4e21e00ebbdbff9eae720b2f7ca
-
SHA256
75df5ddbdaeeec26a7902efc24f7662ea5988c6961c3b87979aefcc5660d182b
-
SHA512
29e13fa1c9a7767df0e62a3d459de749f732419ff1611fd0d625fd6487edc000071ebe88ba014100c0b0eec475cefc7030ffd653c5ac172b4a45c80afae9cbe7
-
SSDEEP
24576:zZusv/DwNLHPJH6pYCkeKW/8XwQmRtPF+mviWavPzVVxty:Qsv/GvtkHKW/8XwQUhahJNy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ebec95fd5e6b0db7a65ac6a250bfc04_JaffaCakes118
Files
-
8ebec95fd5e6b0db7a65ac6a250bfc04_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 932KB - Virtual size: 930KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 462KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ