Static task
static1
Behavioral task
behavioral1
Sample
ea137a5aedf24c90cb3cc777cba1e4c4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea137a5aedf24c90cb3cc777cba1e4c4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea137a5aedf24c90cb3cc777cba1e4c4_JaffaCakes118
-
Size
478KB
-
MD5
ea137a5aedf24c90cb3cc777cba1e4c4
-
SHA1
6f380117b01295eee538267d34d47c4b059fee10
-
SHA256
97344cde798be01ab89d775ec7843a9298891354e8605f8c697a36a3d31cf748
-
SHA512
77d9f27a68279cb181ac7fb8841a78e197c8a1e1c2a5252b680361c5c1bdaa5b88547c82d5fc4072c19138a274dfc714a0e8755f628812286f183b79de82bf94
-
SSDEEP
6144:IFZYC5YeU9cI5Cwlkm9I5br97lSGmNsMBA4+do5lsenQDS7uLAtBSf996y7bPxNa:Imaagz4+dITuctqPPPAL59
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea137a5aedf24c90cb3cc777cba1e4c4_JaffaCakes118
Files
-
ea137a5aedf24c90cb3cc777cba1e4c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 324KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ