Static task
static1
Behavioral task
behavioral1
Sample
ea8983f958f442796a3e83244da7de62_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea8983f958f442796a3e83244da7de62_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea8983f958f442796a3e83244da7de62_JaffaCakes118
-
Size
207KB
-
MD5
ea8983f958f442796a3e83244da7de62
-
SHA1
707084c45fdd313eae7eeb7a369ea94bbbf7445a
-
SHA256
2234d95e29af8a2cd5a9e9e2e2f1c693d4741b509efe61aa113a8bbed53cbc59
-
SHA512
84358213e86d35461382457115a37db8e975579fffcb8409f1d7c9305779d4d1452f647355b2e00657914e56145b5bfd4b467c21185163bd9d8d1d5b836a5633
-
SSDEEP
3072:1Vg1cch3eku4/f5wDacak9Q4CvqSQJQt8DXB7/w24E2G/uipRpZUAE:/gKa3ekiWcakCKr52C3rM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea8983f958f442796a3e83244da7de62_JaffaCakes118
Files
-
ea8983f958f442796a3e83244da7de62_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ