Static task
static1
Behavioral task
behavioral1
Sample
ea23d8bc5c737f80d4a53e2f3267ef8b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ea23d8bc5c737f80d4a53e2f3267ef8b_JaffaCakes118
-
Size
408KB
-
MD5
ea23d8bc5c737f80d4a53e2f3267ef8b
-
SHA1
82d00fb9a3a235faf12107bd9f8913df4c64f853
-
SHA256
e32ac09399b410279d96f0b7585908543f7574fa220fc5bd192d9a191198fc88
-
SHA512
59ddb3753b769bc35d91c6afeb687a4b4a4a32c16cc46b79f155817ffe99d905a89555e8c4195bc1b611b782057044b9030336bbe11d3c30eb706330f4482cf2
-
SSDEEP
12288:t6Dg9Pyg0mymWcRWhnuMN178DUhxtv89DCogtW5UobbXR6M:tr9Pyg0mymWcRWhnuMN170lUvW5RD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea23d8bc5c737f80d4a53e2f3267ef8b_JaffaCakes118
Files
-
ea23d8bc5c737f80d4a53e2f3267ef8b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 377KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ