Static task
static1
Behavioral task
behavioral1
Sample
ea34a85ac582e36e10abfce3de399032_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ea34a85ac582e36e10abfce3de399032_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea34a85ac582e36e10abfce3de399032_JaffaCakes118
-
Size
655KB
-
MD5
ea34a85ac582e36e10abfce3de399032
-
SHA1
c8026994a210ea99f180b11c721534aa1be8496e
-
SHA256
73b5ea3dece72a256a4230407dca8efddff96d514bd3506a73f79ddc7cc95863
-
SHA512
28278aa2ae4cc64f16f74421b05d8f9d3cffe588f5b3988cf4df6f7a5a38565b745061a60409d840bbc2bc711aad814f757d9a7b7ad24a9e8b7e7dddf86cf00f
-
SSDEEP
12288:6zt3fww5BaPYEihtTka3yZ2UUFJ2ZF3Z4mxxmkpsj30/F7g0R3:c3fDaPbiT93yZ2UioZQmXmkpsjgF7RR3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea34a85ac582e36e10abfce3de399032_JaffaCakes118
Files
-
ea34a85ac582e36e10abfce3de399032_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 289KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 344KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE