Static task
static1
Behavioral task
behavioral1
Sample
eabbc08a8189ea8dde19c9506688f59d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eabbc08a8189ea8dde19c9506688f59d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eabbc08a8189ea8dde19c9506688f59d_JaffaCakes118
-
Size
16KB
-
MD5
eabbc08a8189ea8dde19c9506688f59d
-
SHA1
1105140d0052f99a9e97bc5f6384fde7e80c41ed
-
SHA256
1aa8d41eb19116f0ece101067494bd602a78ac30c8dfa194b24ae0b444eb73fc
-
SHA512
57539fd1eedba509e262fe8a148bb1b23d3cbb9f9bae2ece0e9efdddfaadf59082d4dc57fb80ca95f0f813ba00d8bfca824f2a46bac41e779a44c44ed4ee18f4
-
SSDEEP
384:ruYgL+iWP3hgE7Q2BhMfVAgtCwLYU50U9gsZjH:XFhH7fMf6PwLYoVH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eabbc08a8189ea8dde19c9506688f59d_JaffaCakes118
Files
-
eabbc08a8189ea8dde19c9506688f59d_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE