Static task
static1
Behavioral task
behavioral1
Sample
ea0fef57ee26486cbc47261d1a582be7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea0fef57ee26486cbc47261d1a582be7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea0fef57ee26486cbc47261d1a582be7_JaffaCakes118
-
Size
180KB
-
MD5
ea0fef57ee26486cbc47261d1a582be7
-
SHA1
ffbd421b49e9039acf1183eaab63ac4c62a2308f
-
SHA256
c4a1cde2dc1613ee79823b4db600b3153be30714757328f6c44a9b89090a2ec8
-
SHA512
1ab79d99164609d17494f8e7a1dca8f095a62f5512d8918a29073874b9405bd6adfa2d93f192b2d71581e63ed303675a3edc9b042c6212b0235b318dbd4d6eb6
-
SSDEEP
3072:xh2auTA+QrAeLk0rbOu2Hp9S1QAbZq0c4h4fWFCWfPgUy0bc/2hqumJohc:xh4n3XHpgQWq0c4+fcCwpy0b1Iu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea0fef57ee26486cbc47261d1a582be7_JaffaCakes118
Files
-
ea0fef57ee26486cbc47261d1a582be7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE