Static task
static1
Behavioral task
behavioral1
Sample
eb57ab241f686dfba18b537784cdfcdb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb57ab241f686dfba18b537784cdfcdb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb57ab241f686dfba18b537784cdfcdb_JaffaCakes118
-
Size
585KB
-
MD5
eb57ab241f686dfba18b537784cdfcdb
-
SHA1
906fc9dbd290a058c3018eb7e60393ed534d4c6e
-
SHA256
263cea40a89314d5e13de61dd78507a22684fe0fbe1a5751e62889ce57ad7303
-
SHA512
1518dff39f930b159641639cfa164011cf81e444f140f22ac60b06763d1d1aab393b7e195012c7087126c1ef03c04707144a604c8f51bb896324b7ecfd1d3bff
-
SSDEEP
12288:x9OCFUxSx6aNHHfE/B9F/mj77k+XYtcd+/Ynna01pp84tZ9NKAPrkFOhnWK:GCFTnHfYYjxXRdoYnx1pG4zx7hWK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb57ab241f686dfba18b537784cdfcdb_JaffaCakes118
Files
-
eb57ab241f686dfba18b537784cdfcdb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ