Static task
static1
Behavioral task
behavioral1
Sample
eb26860bc02a264807ed60dda9afa89c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eb26860bc02a264807ed60dda9afa89c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb26860bc02a264807ed60dda9afa89c_JaffaCakes118
-
Size
459KB
-
MD5
eb26860bc02a264807ed60dda9afa89c
-
SHA1
e9fa96259fde2a00a2808e2108e8b6d688969685
-
SHA256
2594fb42fbf143a383b96962e127e434832ecd34c7bc150198af8b5264d735e2
-
SHA512
a25ad1159c5f01665427d9fe65f79f09189c0b176a47d02234516c977fad2169b2e432b7a5783ff636ac2ca7dee89f603fb0156c42a9350f53702cb568767929
-
SSDEEP
12288:x+NMycmTYDd6S78QoRlbaXjq6ElsxLgPrwnhYEuo:QNM6TG783lbaq6usxdl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb26860bc02a264807ed60dda9afa89c_JaffaCakes118
Files
-
eb26860bc02a264807ed60dda9afa89c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ