Static task
static1
Behavioral task
behavioral1
Sample
ea047b33a1920c403b3703fac1281d78_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea047b33a1920c403b3703fac1281d78_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea047b33a1920c403b3703fac1281d78_JaffaCakes118
-
Size
126KB
-
MD5
ea047b33a1920c403b3703fac1281d78
-
SHA1
69583b8e4ade03babfbac690364e0c680807624f
-
SHA256
be399778c74749dc2d56b994cd66845a688a304b33b998641ccc516f3365576b
-
SHA512
8ccecabe2dbfdf4d12ca95682c7ac5b48bad019f430ad8158445efd491c28362c3c99beeb450e8599a45200d7e193e4bbd2d2366cfa1c72a117b1d17a5211741
-
SSDEEP
3072:vDHY6NNQiTvtX/mkPY/IhDzl04RekfVyTOHYiF5f9wY/X4uYJXRx:bH9vlmkAAhD+gxcTwN5l3X4uYJhx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea047b33a1920c403b3703fac1281d78_JaffaCakes118
Files
-
ea047b33a1920c403b3703fac1281d78_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 148KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 545B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE