Static task
static1
Behavioral task
behavioral1
Sample
eb33251c5bb482504bd24560d5277695_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb33251c5bb482504bd24560d5277695_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb33251c5bb482504bd24560d5277695_JaffaCakes118
-
Size
27KB
-
MD5
eb33251c5bb482504bd24560d5277695
-
SHA1
b3aab57a661e23b67e9c663e240dd34643f7bd57
-
SHA256
5fb712bf3dbf2945f7b4a4e53648ccd12b7ec54258dd0c8c84c3400eeb282aae
-
SHA512
c43f280e3069505f63ab095c8699c776d9c581c5713a2aa8a65a3cbc372da7c9c9f9e2854206c697cd3f1b464143a3e74d8f2a0f5de94afd0f8d79905a822c1c
-
SSDEEP
384:8KoA0iaVZAszu/RQ+mLyvXYu5+z0Y5cQcEX2FHoM0K3qND0MEuq2NE9mvnTDJ5eO:7oTHupC2/kB5cWmFIM050MBq2yIDJcO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb33251c5bb482504bd24560d5277695_JaffaCakes118
Files
-
eb33251c5bb482504bd24560d5277695_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE