Static task
static1
Behavioral task
behavioral1
Sample
ea45088493ce412444d3d8d090cd2288_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea45088493ce412444d3d8d090cd2288_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea45088493ce412444d3d8d090cd2288_JaffaCakes118
-
Size
1.9MB
-
MD5
ea45088493ce412444d3d8d090cd2288
-
SHA1
91d944796c570debba22ae53a397958752c469ed
-
SHA256
c07fa49c73e7e398f401c2ab2526a4ab6180a5f641bcccbfb84c0ecf8f0e8eb8
-
SHA512
79abf35aff029b3eb09fd4ede413f8a1895bfe478ecbd68b3b726dfec871f992ba126242571bbf46488e2ccd21a7d0bc291f36cc7e8f40dbaab246925348abdc
-
SSDEEP
49152:rl+Dyl5nXSGL6vnFkuFXCaKjJZmdhFrDR8XmxFb9rR80:rl+u3nCGL6fXXCaKjJZmDFrDR8XmHli0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea45088493ce412444d3d8d090cd2288_JaffaCakes118
Files
-
ea45088493ce412444d3d8d090cd2288_JaffaCakes118.exe windows:5 windows x86 arch:x86
079e9b2d865b2fff7a9fdcd6fa783509
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32 winmm
GetClipBox 3*
Sections
.text Size: 1.2MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 656KB - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ