Static task
static1
Behavioral task
behavioral1
Sample
eb49ca8d9942f35e7490943e90336d56_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eb49ca8d9942f35e7490943e90336d56_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb49ca8d9942f35e7490943e90336d56_JaffaCakes118
-
Size
8.3MB
-
MD5
eb49ca8d9942f35e7490943e90336d56
-
SHA1
5c70552fbec2d38d24b4c3a90873e8603bc666c8
-
SHA256
815233767fbce272994c470d16850108f5924bd697077382ebbc9c61f2018d35
-
SHA512
1e60b03f9908e3395e96ca366feba630b5ddbb0c2ff361ddc22e4c6f0c2d1356c73a53cb5049194b1b77783f2eefd1df69100181c0ccd1625ccbad2ac5784a5f
-
SSDEEP
196608:WzCETEoDwSYKfxq5qq7Cc146BmgCZ0E9RuN/vmKj6:vLokhx15BmLONvmKj6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb49ca8d9942f35e7490943e90336d56_JaffaCakes118
Files
-
eb49ca8d9942f35e7490943e90336d56_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 9.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 8.3MB - Virtual size: 8.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE