Static task
static1
Behavioral task
behavioral1
Sample
ea0fb955b04c9bdd4be12dbe4b876896_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea0fb955b04c9bdd4be12dbe4b876896_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea0fb955b04c9bdd4be12dbe4b876896_JaffaCakes118
-
Size
81KB
-
MD5
ea0fb955b04c9bdd4be12dbe4b876896
-
SHA1
7358574662e75252d48485089ccd4481c9586e47
-
SHA256
488b5fe02301ab609c1dd05206f6c90e4f2c9260339e74c19bb21edc3e7ecbe9
-
SHA512
db92a2b07b6eb767fa4c14e41a971191decce66f3652c1aab54999cab7590defb2c03545aa6004be6352ae6c30533a08090e0690c620ce27afa08e907d062e51
-
SSDEEP
768:HFLO2TJ14R1bikVK6Hv/BKm34iW8gu3zR8saIErZtriYLQo2OrOe7BmrexbGJ:lLFqRXHIm34if9yX+Vo2OrOeErexE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea0fb955b04c9bdd4be12dbe4b876896_JaffaCakes118
Files
-
ea0fb955b04c9bdd4be12dbe4b876896_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
22ibtbea Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
60mgudr5 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
md4y.1m2 Size: - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3.px8hlj Size: 621KB - Virtual size: 624KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2j0kioqm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ