Static task
static1
Behavioral task
behavioral1
Sample
ea89dbb246414dd5058781437d9a86c6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea89dbb246414dd5058781437d9a86c6_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
ea89dbb246414dd5058781437d9a86c6_JaffaCakes118
-
Size
400KB
-
MD5
ea89dbb246414dd5058781437d9a86c6
-
SHA1
feb36e75cec5534c71abe48eda1cab9b4fa86553
-
SHA256
4fc803df0fd7b0a88efc11bc4e3dcb135afecedb0442af1d38aefc7f8b91bdad
-
SHA512
a6b6bf791c0e8272f51466491dcb48f3c5d41ac36fefa923829b16eee024568bd4a63bd677d65ddc1e4da611d818a37e94466602043a87d8c45c82d43ad52967
-
SSDEEP
12288:JAcxhLUtyCZcAvaY5zaxg5rU4mTFOlexJ5OXd2feQP:JA8hLUttZ1vaY5zaC5Hlo5OXA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea89dbb246414dd5058781437d9a86c6_JaffaCakes118
Files
-
ea89dbb246414dd5058781437d9a86c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d8e9e06f8e51550e3e5089179e9846d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sections
Size: 289KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.efewf Size: 38B - Virtual size: 38B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE