Static task
static1
Behavioral task
behavioral1
Sample
eaf55d861c5d08f612e8c7ebcdd28f16_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eaf55d861c5d08f612e8c7ebcdd28f16_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eaf55d861c5d08f612e8c7ebcdd28f16_JaffaCakes118
-
Size
59KB
-
MD5
eaf55d861c5d08f612e8c7ebcdd28f16
-
SHA1
d4faa663a63d1b0596d2c65989a33fa022425f97
-
SHA256
0f8eedc0f6835a03c4c5c5e0f16446f5195bbbd1fe16cfe6432a366d8e2cdf7d
-
SHA512
fb44d9acd70ea7d5b30397ba00ec0d87252322bfb228f815707f48dc441dd93728a55393a2cf9d9eb9dadbadf83b6d99f007b0367384b5eafb013658e9e0cf98
-
SSDEEP
768:oh5ekh8Etr2T9KoeKPGMBUzYPLmqsfbRyZt3MdkK/oJN4SL8c/GHteij:bEtaTtxBUMLKf1yZuw4c8/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eaf55d861c5d08f612e8c7ebcdd28f16_JaffaCakes118
Files
-
eaf55d861c5d08f612e8c7ebcdd28f16_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 393B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ