Static task
static1
Behavioral task
behavioral1
Sample
ea42a13fe52fbd4f0ba702c449b4f9b9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea42a13fe52fbd4f0ba702c449b4f9b9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea42a13fe52fbd4f0ba702c449b4f9b9_JaffaCakes118
-
Size
44KB
-
MD5
ea42a13fe52fbd4f0ba702c449b4f9b9
-
SHA1
5ddfd02f8e7b310aecc8aab94722d4bb6b3fb379
-
SHA256
2bfe56b0fce198d16edc35367396207392ca5ed48267d3aad3ca714b066da17d
-
SHA512
17e32d4f203602f8534d3f807280a2a508476c4b96ad6b4e50e73949cee11e2d04b85be3b14043381769ad08bdc4ebdfd4b69822238df9570e268ca818edb585
-
SSDEEP
768:iTGU6btwHyyOJJJJJJJDzaKqA8NCRj0lfAQTQ2r:iif6yHJJJJJJJDzaKJ6CjHQTQ2r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea42a13fe52fbd4f0ba702c449b4f9b9_JaffaCakes118
Files
-
ea42a13fe52fbd4f0ba702c449b4f9b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ