Static task
static1
Behavioral task
behavioral1
Sample
ea19eb5fa080cc247dcd644e946a64ee_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea19eb5fa080cc247dcd644e946a64ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea19eb5fa080cc247dcd644e946a64ee_JaffaCakes118
-
Size
1.0MB
-
MD5
ea19eb5fa080cc247dcd644e946a64ee
-
SHA1
700b0fe6207d633a8e5397cc25306aa1c4075292
-
SHA256
57bb0d338954e3c6eb9d3635abcb54d3f71f9b5207a333d32bdf27176c1e98c5
-
SHA512
97212551a3e6ded9323b0bf40e8f324a9e139eae5402c00d007f5bd3553968b6fa5baa7f7464b3d51f00c16a22ca303f4e8cbf774589b38763cd4e31309116ad
-
SSDEEP
24576:cFDw+LEw4Lm+KlLTPGZrG/3IVoszbEaUY01B3pHGjas3p0Y:WVEq+SLTeVZ6KfU51B35GuyV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea19eb5fa080cc247dcd644e946a64ee_JaffaCakes118
Files
-
ea19eb5fa080cc247dcd644e946a64ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
eee9062b8cbe1efb89c250150605b1a4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
FatalExit
Sections
CODE Size: 1010KB - Virtual size: 10.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccp3p Size: 1KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE