Static task
static1
Behavioral task
behavioral1
Sample
eb08032fe63f3baeae59c451a7685664_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb08032fe63f3baeae59c451a7685664_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb08032fe63f3baeae59c451a7685664_JaffaCakes118
-
Size
402KB
-
MD5
eb08032fe63f3baeae59c451a7685664
-
SHA1
349b13a6f92dfb24dab4051c869b1f8a1084488c
-
SHA256
047cda3b7217a31dede386a1521922e4f186369c584fe5f9305b3467e39d6acb
-
SHA512
dcc6e99783b360f80463e667b855a0b930ca091925a6c3f9904f23bf1bf62ca4304a2dba27025ad285338f2f6af085be978f043e5010e3152b160a71804629b2
-
SSDEEP
6144:y10q8RYPhWtTBHzfvFyUuees2Loz0VCcX8VPWni783JU7xtgGjt4KxHQWL:JqEYWtT9XcUuJdLozX08NdzgU7xHQU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb08032fe63f3baeae59c451a7685664_JaffaCakes118
Files
-
eb08032fe63f3baeae59c451a7685664_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ