Static task
static1
Behavioral task
behavioral1
Sample
eaaccb73b1f5b3615eb96f13918ab6c0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eaaccb73b1f5b3615eb96f13918ab6c0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eaaccb73b1f5b3615eb96f13918ab6c0_JaffaCakes118
-
Size
604KB
-
MD5
eaaccb73b1f5b3615eb96f13918ab6c0
-
SHA1
c98db7e6273ef6b9093a95ff16470771c52df12b
-
SHA256
6960d5cb0410cb2f6f4ecc558a6959c09e7358ed27e8ff0609b7cd7d06496a4f
-
SHA512
baa67f20cc86ad6d60e85cd5ce6aaacce62dc28ded0017d0ce9e5ffb15f7ae9a0b67eee202b7236e45762897484a07c153b6c313ca4ac4bae7592087636c3dc7
-
SSDEEP
6144:nq3bNJIsDnCImRB+Vk9EUT2zitYtg71bBn2OexFM0fwOt2hMua/v:q7IzEhU2Ay2COOPfwOEu9/v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eaaccb73b1f5b3615eb96f13918ab6c0_JaffaCakes118
Files
-
eaaccb73b1f5b3615eb96f13918ab6c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.scpack Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ