Static task
static1
Behavioral task
behavioral1
Sample
eb49c7ba88a462a64190270b11b53ab5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb49c7ba88a462a64190270b11b53ab5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb49c7ba88a462a64190270b11b53ab5_JaffaCakes118
-
Size
31KB
-
MD5
eb49c7ba88a462a64190270b11b53ab5
-
SHA1
a10a7417c538e2fb8c8acd9f22a46297957d4a87
-
SHA256
a3aaaf6daf17067a4bb29bcf8bb7aac758eabc26481f22b642aa1802a9ec5c64
-
SHA512
6c9ca9c3b20f2c183ead1cdce29490471142604ed5e4cd2375a9dd0ab9ed7e810fce64f66d1780dc7aa296b54ac959a94ecf4527e377533f1a52fed8d147121d
-
SSDEEP
768:x7GkWsCLSWPjcZnsvfuOwT9OhVm1olI5kEndLIxjIKs3CxmcgO:x7GkWsCLFjcZsvfnwROfvI5kCxGTsImU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb49c7ba88a462a64190270b11b53ab5_JaffaCakes118
Files
-
eb49c7ba88a462a64190270b11b53ab5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE