Static task
static1
Behavioral task
behavioral1
Sample
eac9aa3b48634bf638bda8ca17d28e2d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eac9aa3b48634bf638bda8ca17d28e2d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eac9aa3b48634bf638bda8ca17d28e2d_JaffaCakes118
-
Size
83KB
-
MD5
eac9aa3b48634bf638bda8ca17d28e2d
-
SHA1
89dfdab326477f443ea7828733506ed4b318fba2
-
SHA256
9a8de61e8e4898d86adae8ec0cc45671eae9742d7ab104f0d1960d695e48282b
-
SHA512
4bd031e0eb58d94be01190fa470d51e3d55418000705f3a73ce4bfd8d6102263ff475f08ab936c8ed35c7ae7241e9660f577db05e393a9451151dfebdbb98f41
-
SSDEEP
1536:gBOhV9Eg5kTWiksvLkuoD5AMkEUU67eqtCZFKI/F9CgSGujdR:OWV9b5KWikaLkuQ5QEZ67ztCZFv/F/ub
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eac9aa3b48634bf638bda8ca17d28e2d_JaffaCakes118
Files
-
eac9aa3b48634bf638bda8ca17d28e2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
/APES/ Size: - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/APES/ Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/APES/ Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tElock Size: 27B - Virtual size: 27B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ