Static task
static1
Behavioral task
behavioral1
Sample
eb26d54835ecc8e78b1cb680c2873feb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb26d54835ecc8e78b1cb680c2873feb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb26d54835ecc8e78b1cb680c2873feb_JaffaCakes118
-
Size
26KB
-
MD5
eb26d54835ecc8e78b1cb680c2873feb
-
SHA1
01f0316172c6e6b3b783a6a6cf77b8bf38b94dff
-
SHA256
e7f34f0278ac58e8eb2ee96a22d448564867a4eb0d375be86db3e0b626678508
-
SHA512
24b2569a657ba1c2cba10f1f4f1558fb341e6cbcafde137a0e4bd975b7dbf0e4a4110cb36e75717ecedfc5608004da7457be09094070f022c5325bd7653ddea6
-
SSDEEP
384:aPd6bFJcMkdU/Jc63t+TZNz6vbVgGa7fuvVvJqysTQ7XzzTnN8mdwfvhm:W8FJ7B9+v2+h7ensTiX7nNbd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb26d54835ecc8e78b1cb680c2873feb_JaffaCakes118
Files
-
eb26d54835ecc8e78b1cb680c2873feb_JaffaCakes118.exe windows:4 windows x86 arch:x86
17f7fb6341bcc3235506b44ab2887d57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
GetTickCount
ExitProcess
Sections
.text Size: 512B - Virtual size: 70B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 170B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE