Static task
static1
Behavioral task
behavioral1
Sample
eb4cca0d2e0d0dd7a12257d6375beac8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb4cca0d2e0d0dd7a12257d6375beac8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb4cca0d2e0d0dd7a12257d6375beac8_JaffaCakes118
-
Size
80KB
-
MD5
eb4cca0d2e0d0dd7a12257d6375beac8
-
SHA1
e50907bbb47d73e05693f49381f2ac3cf3a0c67c
-
SHA256
987836b22d984dc7e3d635c6a0d19a5e0c852778f4bd95533d70792a441e3a8c
-
SHA512
86ca6b5f53e39f6f4325b1e5a54805570531d4afdc2ba2340845fd964cdafbf552285eca1ab56468b133d530deadbd5a11b1d0e23514c3ff125933476938eb4b
-
SSDEEP
1536:d8a0MB2Zpd3TFzphMWnJBVF4dfQz50eVyZDK+26AS1ayRhe:d8a03jF/9BVF4JQ1nyBC0wyRc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb4cca0d2e0d0dd7a12257d6375beac8_JaffaCakes118
Files
-
eb4cca0d2e0d0dd7a12257d6375beac8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE