Static task
static1
Behavioral task
behavioral1
Sample
eadcc6e29eb7ee5ae835969f9b9b8e2b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eadcc6e29eb7ee5ae835969f9b9b8e2b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eadcc6e29eb7ee5ae835969f9b9b8e2b_JaffaCakes118
-
Size
44KB
-
MD5
eadcc6e29eb7ee5ae835969f9b9b8e2b
-
SHA1
0860649bb784b3bfd07e93a99a913d198e0dc6e3
-
SHA256
85e64b2e88b3d44bf09818d78b84a87e951e5a8034553c04488bd2d2ca3b4174
-
SHA512
9152446293a6164e8a5079156278c74fc8d5a617e06c367d62a72f4fceec54d6bdc3135a8e3506d370706f95cf228885aa713fd601061172904a7b1ecf9fed33
-
SSDEEP
768:dZlmmYXF7RJIPTpsrvNZXf01cDMDaddPeR+n6uXcoWpLQbMR9gIX9qegCgyhR2OO:rkhXpfCcDMmddPei6usoWqbMR9gIXUeo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eadcc6e29eb7ee5ae835969f9b9b8e2b_JaffaCakes118
Files
-
eadcc6e29eb7ee5ae835969f9b9b8e2b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�#�s�'Pb Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
8���� Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
'a\�@ω Size: 5KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�cAM���� Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE