Static task
static1
Behavioral task
behavioral1
Sample
e0b30af7eb9e3950ad4659eb7a5aced7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0b30af7eb9e3950ad4659eb7a5aced7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0b30af7eb9e3950ad4659eb7a5aced7_JaffaCakes118
-
Size
12KB
-
MD5
e0b30af7eb9e3950ad4659eb7a5aced7
-
SHA1
a349e9559b0ac83a4e3e2d77217b420c260f572a
-
SHA256
4a4903eac3d17cdf1415197c80368f87a258e56d14ac579637ee930eb3e6009a
-
SHA512
3b4a2fd602ba49879ff734146ad2195f9e68a08697caadb3ee5620ba764c8aa467ad8aa0551be5d4a9ecc102bf4f06e842e1e94bf50c932a829f708a774881dc
-
SSDEEP
192:nfR4QCWTDqIiRI7PX3o1zWSiNNxnjm2yfT1Cnnc4A3OVP2Ay9OOix3hYE/E:PDqXI7vizWSiHjm/snc4pl259AJM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0b30af7eb9e3950ad4659eb7a5aced7_JaffaCakes118
Files
-
e0b30af7eb9e3950ad4659eb7a5aced7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ebjlmsw Size: - Virtual size: 72KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE