Static task
static1
Behavioral task
behavioral1
Sample
eb3421b5e14f2e8f6bd8f3c5fbd42cb1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
eb3421b5e14f2e8f6bd8f3c5fbd42cb1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb3421b5e14f2e8f6bd8f3c5fbd42cb1_JaffaCakes118
-
Size
117KB
-
MD5
eb3421b5e14f2e8f6bd8f3c5fbd42cb1
-
SHA1
1c4ed4fcb281e6572cfd94443a1434b3b8a5e52a
-
SHA256
ed8ac6104899df20c65c8d04e9e004d0ab76b5c8ff6e37ab8d7e1c7aee2a0a4b
-
SHA512
b5e7d95b58a5303280498b35eb5ac8585f46a9f15c28a5c60bf4e5a2a678af04cf0060812dd39ff29b7c8a44704041766bdeddbda78301224f5a8bb4b3508ec7
-
SSDEEP
3072:QiXE6H2okMfiYVORNyD6+Z933/ZaLHSEA/HXH6z4HV:QiPW+Zw+Df933/KA/HXH6zW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb3421b5e14f2e8f6bd8f3c5fbd42cb1_JaffaCakes118
Files
-
eb3421b5e14f2e8f6bd8f3c5fbd42cb1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE