Static task
static1
Behavioral task
behavioral1
Sample
eb7bde2821016f8fbb06384f30644f15_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb7bde2821016f8fbb06384f30644f15_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb7bde2821016f8fbb06384f30644f15_JaffaCakes118
-
Size
181KB
-
MD5
eb7bde2821016f8fbb06384f30644f15
-
SHA1
1a001236ce265e95927a99547d3ccad4d105d835
-
SHA256
5a7f019ebc03ab96a85dd43c3b73d5e57bdcbea91f3a5530115d5d1c17faa4cb
-
SHA512
1c21b8b03d64ce26dc8666a1b95cc9be0a5d23dab5e0b0336e9f2324c8f3962602ab3f68208d06c370ceca97d577dbcfd656b70899e61af2e967f2fdfb2e43cd
-
SSDEEP
1536:5BZruJMwCU90uWWnU9l18Bdpx4MRVABlZOH5RWIoE/IklcyX8uN+WE1dv1XesyGv:luJJCUtU94Bf5GXcLtzY17aKGm7lRBN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb7bde2821016f8fbb06384f30644f15_JaffaCakes118
Files
-
eb7bde2821016f8fbb06384f30644f15_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
���t���( Size: - Virtual size: 468KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�7݇H��_ Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE