Static task
static1
Behavioral task
behavioral1
Sample
eaab84a3f2ca3ac8cf7b3d68b409d4af_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eaab84a3f2ca3ac8cf7b3d68b409d4af_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eaab84a3f2ca3ac8cf7b3d68b409d4af_JaffaCakes118
-
Size
332KB
-
MD5
eaab84a3f2ca3ac8cf7b3d68b409d4af
-
SHA1
44ef4a923220cca5cea985b67d88a6c3ef32c402
-
SHA256
c6187d45704efc4829f1f32ad6be1319d342ffa3e3a63836bd95521b35b8d480
-
SHA512
5406378724357ff16d29b242bb2790c38f149e14eb8cc1787cf1e8c3ee3254963de17d5d23570f082491777cc6b419d8005542c804cd075fd2b4eeb054f12455
-
SSDEEP
6144:G0xR59F2idZecnl20lHRxp3gpdG0LSQK0CCbVmOpF042wZAM:x5HF3Z4mxxMdGBJ0CCbVHF089
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eaab84a3f2ca3ac8cf7b3d68b409d4af_JaffaCakes118
Files
-
eaab84a3f2ca3ac8cf7b3d68b409d4af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE