Static task
static1
Behavioral task
behavioral1
Sample
eb3945c2a5bd9a2ca27cc3192ad6dc89_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
eb3945c2a5bd9a2ca27cc3192ad6dc89_JaffaCakes118
-
Size
72KB
-
MD5
eb3945c2a5bd9a2ca27cc3192ad6dc89
-
SHA1
6edad367df338c9a517120c069643385c9080a61
-
SHA256
7f527760e3793053c08446c1efd47254da4336d49309f94ce183b4def6429c51
-
SHA512
d6e089c9ddb374a73a991c87c2bd01c4007b7cb6c4fd5217f679fab61e0a1209948bb07f375d4f0f4237927cd97de91d642caee46d0a100bc31099ef89e26589
-
SSDEEP
768:+o2Ppz1ipRcaSn7NWfZFfaLXO169C5VvHZwm11avpXl5OlgMzbcTcJ4izeA3:+o+HsDMc/iLe164FHZA/5OloTcJ4iiA3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb3945c2a5bd9a2ca27cc3192ad6dc89_JaffaCakes118
Files
-
eb3945c2a5bd9a2ca27cc3192ad6dc89_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
������� Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��� Size: 256B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 256B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsr Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ