Static task
static1
Behavioral task
behavioral1
Sample
ea4a8b9a8ff85988492193a756fbdbc6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea4a8b9a8ff85988492193a756fbdbc6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea4a8b9a8ff85988492193a756fbdbc6_JaffaCakes118
-
Size
283KB
-
MD5
ea4a8b9a8ff85988492193a756fbdbc6
-
SHA1
de37e0b05b0bfa34d8f5a4874cd96cdc42a25b5b
-
SHA256
42f64a1307830eb95fe3ae51559430e3266f3823cf75f12cecd4dddf17f8f045
-
SHA512
3bb74aafc72d5e46d8a4a40e5e57a4bb53b469dd9fb89cc6e644a0d03582ef882fed4c0bfeee127ccc1714125e0206d6cd5f0414f5b2e2c181722584deb73e3a
-
SSDEEP
6144:gB7eVbeCC9choSvw3NOB+On7JQf0h31NRE//TYcyIR:4CVbeCgczvk4Btnud/LYNIR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea4a8b9a8ff85988492193a756fbdbc6_JaffaCakes118
Files
-
ea4a8b9a8ff85988492193a756fbdbc6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
�Tan0 Size: - Virtual size: 788KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�Tan1 Size: 282KB - Virtual size: 287KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE