Static task
static1
Behavioral task
behavioral1
Sample
ea1431d04fa42681f0ddb2a31a5274c7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ea1431d04fa42681f0ddb2a31a5274c7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea1431d04fa42681f0ddb2a31a5274c7_JaffaCakes118
-
Size
50KB
-
MD5
ea1431d04fa42681f0ddb2a31a5274c7
-
SHA1
375319e7c2559d3f26556d6dd9e8fecb938e2c1a
-
SHA256
ab524cf26a5c0e889d87daa369865925f3a3d2bae702b35eb0b198f48210ca06
-
SHA512
1fdd03751289ca9cec25f3ecbfa43295fe63ec523035bda7d0dd927e9060af02137b330e0c375f14c0a29b3c9d38a515f1cb926afcf678f4dfc2d87cbec60ad0
-
SSDEEP
768:2Crh06Es2TR2hhfv1j8mOstKqINO+Wu8dvG/i0l5QIyqtDxn+p5vqSUg6l:2CrG6bhhVgmPQmG/HQVTvvqSUgA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea1431d04fa42681f0ddb2a31a5274c7_JaffaCakes118
Files
-
ea1431d04fa42681f0ddb2a31a5274c7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE