Static task
static1
Behavioral task
behavioral1
Sample
eb064e84633f7970a1860c29f2e39b9c_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
eb064e84633f7970a1860c29f2e39b9c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb064e84633f7970a1860c29f2e39b9c_JaffaCakes118
-
Size
59KB
-
MD5
eb064e84633f7970a1860c29f2e39b9c
-
SHA1
7c98c49c636b7a6364677a3445da6fa7f2de49fa
-
SHA256
d109c3f92236ba88682e8002f7c91e428ef1bcb107d8a00699e85082aac585be
-
SHA512
2745f9a4223e8eec892050805e3b66f7553e851726681f1f495ea03ea3f9087793cb677dfd33ef6ea44a23659eeb5c10a293b70ffe8f039e849b72444075bf46
-
SSDEEP
1536:VU2SyNT974X+DB9PSYkiT05ktTIXRLKkUld:VTNJ74u19NkiBTIB+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb064e84633f7970a1860c29f2e39b9c_JaffaCakes118
Files
-
eb064e84633f7970a1860c29f2e39b9c_JaffaCakes118.exe windows:31557 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
irrrzrjr Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
izzyiqqy Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
azaayqya Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jqiaqjjr Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ