Static task
static1
Behavioral task
behavioral1
Sample
eaa9f5e7ac69609ad1d415d3369139d7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eaa9f5e7ac69609ad1d415d3369139d7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eaa9f5e7ac69609ad1d415d3369139d7_JaffaCakes118
-
Size
27KB
-
MD5
eaa9f5e7ac69609ad1d415d3369139d7
-
SHA1
9b359f71bf5591e52bcc0718ddf5479bdee363df
-
SHA256
4cb9c5a84be14174a86caeda9f0a843813b16544c852fec7e821963c01748332
-
SHA512
7dab0f5595d2a946fe2f5538e2fdab94e17573e9e69be44b0482543f1bda33b48a51b38113bc10acffbfd91e297044a4808f8b3c6971f68d7595754c992a18a4
-
SSDEEP
384:i0lIQxn49FS1psn4UR3kYgbfZgJiz8G9a8UqNHoWe4ogQrjWrj:i0Kg4WG0HbfaYoGg8UkIP4lKqr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eaa9f5e7ac69609ad1d415d3369139d7_JaffaCakes118
Files
-
eaa9f5e7ac69609ad1d415d3369139d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ