Static task
static1
Behavioral task
behavioral1
Sample
ea956d00d3d292370c0fdd74262038c8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea956d00d3d292370c0fdd74262038c8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea956d00d3d292370c0fdd74262038c8_JaffaCakes118
-
Size
45KB
-
MD5
ea956d00d3d292370c0fdd74262038c8
-
SHA1
413848e8d7b9a9cd85e5bd3fcaecd2dcf7212ac6
-
SHA256
4895acd2e4e1de2d6761c5545ac810e15922660bd26a32667ecea53c0b051ff8
-
SHA512
0e97573791c5e15e47cc169dff7cdc3c87d018b160f6aa3929ec8a55d59f4ef24e3d779ac8d2edc79f848b7cde9af5150c920f3e3e8579577ee26888d506fde2
-
SSDEEP
768:uAmAMKBQDQ+0c6x3PIOvnu5otnUCNjkKqJxC01an5QogyZS75rjcSWQUfWlJ:xLM90cohHNjkbJE01ixgyZu5R5U+lJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea956d00d3d292370c0fdd74262038c8_JaffaCakes118
Files
-
ea956d00d3d292370c0fdd74262038c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 620KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 206KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE