Static task
static1
Behavioral task
behavioral1
Sample
ea6a4d3c0d47653b47dbb50acb2fe1df_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea6a4d3c0d47653b47dbb50acb2fe1df_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea6a4d3c0d47653b47dbb50acb2fe1df_JaffaCakes118
-
Size
103KB
-
MD5
ea6a4d3c0d47653b47dbb50acb2fe1df
-
SHA1
2a47947e15813677c8f7517b89e7e6ae06af24cb
-
SHA256
3293b86fed6a9075d44587df505951809edbf80744ecf76fa0ea1ddc3dee93d3
-
SHA512
5138a2deec6c1166cbc7f7e93d42a73c8a73c2f96f4e8ac72a71bab957f2eae1b0c140454a8c5c42c9b6a95c51bbb333baed6a798e29c9fc2f51848354bc1be5
-
SSDEEP
1536:1kGVCJ/F2h3E4nhgc66Yv3n3wp9AYHdWR4mAedB2IOhfvmf8L9zOyHcb9iFazb:bI8hv23ngHdudB2IWef8L9tHcoIzb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea6a4d3c0d47653b47dbb50acb2fe1df_JaffaCakes118
Files
-
ea6a4d3c0d47653b47dbb50acb2fe1df_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE