Static task
static1
Behavioral task
behavioral1
Sample
ea8d7a17e521635b965a235388e52b09_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ea8d7a17e521635b965a235388e52b09_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea8d7a17e521635b965a235388e52b09_JaffaCakes118
-
Size
515KB
-
MD5
ea8d7a17e521635b965a235388e52b09
-
SHA1
f20d9245abae44a7a6fc1d193664fb673e88978c
-
SHA256
1c57b05fe4aa0f1ba969f19bf212400cfa517d0f70dc6b65b882f4243227c7e4
-
SHA512
f39001d7917e28a6d6657b241847800729af4a7d84570d99c6c36476416d394dbb1857b0325a1db5c8fa8352a6e57864af2ee753d6172fca6ea7c5243ccd2251
-
SSDEEP
12288:M5rxLpq60Ez+gx6kCm0hcDMdCKB1YeFf0DNJVa04G:MdxLE60EakCm0CDMd9Q14
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea8d7a17e521635b965a235388e52b09_JaffaCakes118
Files
-
ea8d7a17e521635b965a235388e52b09_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
EPE0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EPE1 Size: 501KB - Virtual size: 501KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE