Static task
static1
Behavioral task
behavioral1
Sample
eb581c55f40a3fbba766fa20e51fa750_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb581c55f40a3fbba766fa20e51fa750_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb581c55f40a3fbba766fa20e51fa750_JaffaCakes118
-
Size
183KB
-
MD5
eb581c55f40a3fbba766fa20e51fa750
-
SHA1
1432db01cba6169e1be2fa248783301760cf6a5d
-
SHA256
43f33c8f2bc231e601a05164371fb8afce3784ace471999a7b8d346b958f1cd4
-
SHA512
2a5f6677ccd317b418b05114d6af364b5ec7aea7f1b3b98afa873cf3466170b64f8f2253ed11a743e06f560da8e575f7cd7ef1a75f4168783953811f63f731c2
-
SSDEEP
3072:oL5UwE/Rs4cW/WwkO61TRAV+s/S978LbmlLefPPH1eSX8uwqlm5DILg1U:ImVjkOmZ83ml88cwDILa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb581c55f40a3fbba766fa20e51fa750_JaffaCakes118
Files
-
eb581c55f40a3fbba766fa20e51fa750_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 179KB - Virtual size: 954KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE