Static task
static1
Behavioral task
behavioral1
Sample
ea33d0f92143cf95b4261fcdcb8f28e8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ea33d0f92143cf95b4261fcdcb8f28e8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea33d0f92143cf95b4261fcdcb8f28e8_JaffaCakes118
-
Size
296KB
-
MD5
ea33d0f92143cf95b4261fcdcb8f28e8
-
SHA1
70131873c9c96e4092a5033caa1d9e6b3b8e5865
-
SHA256
b7453a5b6600bab11392b5e60d4dcf9c1cf7b12506070ea1f4842b39e9aeb2ad
-
SHA512
b6077ebbc8aaf93ae7b50d5b7a663d0fd27021edda6649124627e67a3b010be0957ee236e50468099915ced0f0fa99fd24115cdf160777234fcd66a79deb9ea0
-
SSDEEP
6144:z/XgrfnBp+5xgFPvLHv6nOFfyW3lF65RJBuhqmrMrsIsOERJI1:DXgLnBTFPvrdfr1F65RJOM4mEz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea33d0f92143cf95b4261fcdcb8f28e8_JaffaCakes118
Files
-
ea33d0f92143cf95b4261fcdcb8f28e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 884KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 294KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE