Static task
static1
Behavioral task
behavioral1
Sample
eb8bfe3d1777d395e2ad8c5eb8228a5c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb8bfe3d1777d395e2ad8c5eb8228a5c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb8bfe3d1777d395e2ad8c5eb8228a5c_JaffaCakes118
-
Size
266KB
-
MD5
eb8bfe3d1777d395e2ad8c5eb8228a5c
-
SHA1
5a1bac614d7ebe4fa7143a7ad47c6869d02d67b9
-
SHA256
68977e6330c367c4f5489e7d9516bf8d535da46696b990ca1c1a5298f786281b
-
SHA512
c04d0584dc1c254699884c3c5d05dc8cb845e852778a1ef304cd6b7238e7f6e4f33b7fc87d75cc99a0e31e03242c3f3abb06e98a5756adeef006942dfa92cbf3
-
SSDEEP
6144:Jz3b5pcApC9XG2W+2eUMyLV9voEgUVCu3h9H9YJm3ru3m/J:J7b5pcANJZvrcux9H9Yo7uA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb8bfe3d1777d395e2ad8c5eb8228a5c_JaffaCakes118
Files
-
eb8bfe3d1777d395e2ad8c5eb8228a5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 864KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 265KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE