Static task
static1
Behavioral task
behavioral1
Sample
eb0c2f31516e0b6cf816ac3017247850_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eb0c2f31516e0b6cf816ac3017247850_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb0c2f31516e0b6cf816ac3017247850_JaffaCakes118
-
Size
188KB
-
MD5
eb0c2f31516e0b6cf816ac3017247850
-
SHA1
0e75666516bb1fb07909a278e034bc9e6f102745
-
SHA256
6b69f81d8e5ac4fe786d1ecce36dd3bdbf6371a0a551d57b11b0813aac480245
-
SHA512
97a14e4b3d33647ee902739cdab2ba19ea90c2c8ca8b966777c5c82205c610430834e14757f26a9ba522c47dd46d95fe2ea4e1ad03dd3e35d7389d7241012f7c
-
SSDEEP
3072:DryyhLPV81gD6dEPzrT3Ye74CfEglhBZs9nneKr52A2zD1GzuLPPuKkfuhcfkc:i6LPEgembrT3Ye77MgZsxjIA2N1kmhcH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb0c2f31516e0b6cf816ac3017247850_JaffaCakes118
Files
-
eb0c2f31516e0b6cf816ac3017247850_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
zv0mUzo5 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
V20c43aJ Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
TN6gE3HM Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jHXEIGno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VjKeOlBY Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
TN6gE3HM
-
V20c43aJ
-
VjKeOlBY
-
jHXEIGno