Static task
static1
Behavioral task
behavioral1
Sample
ea3248adf360246c515551a7935f47a8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea3248adf360246c515551a7935f47a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea3248adf360246c515551a7935f47a8_JaffaCakes118
-
Size
38KB
-
MD5
ea3248adf360246c515551a7935f47a8
-
SHA1
bf43f3e484d8ad295d8ebe543f7e5decfbd33ba4
-
SHA256
0a8260d391037487295246094b7ac8b3d4120d64768a4f5905693a47f19d3f8f
-
SHA512
b7b435fb9649ddeb45da2dc385dd2b142c9e0cef1c76b2d83ca04d3afd4510786cf1b075cfc894c9e1364a5f1ffc3c4b6cffa13518fc3c5f28bc4d3b9565f6a1
-
SSDEEP
768:cP5qPY1+Aj6H6Lsu/lnK0lX1z8eepQ7v0L4bqtFraRlBX:cP5qQ1rjplnK0l95vZbq2V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea3248adf360246c515551a7935f47a8_JaffaCakes118
Files
-
ea3248adf360246c515551a7935f47a8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.gtirox Size: 31KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jex Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dshkr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dof Size: 512B - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE