Static task
static1
Behavioral task
behavioral1
Sample
eb846d242922eef65116c0d7c508f747_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb846d242922eef65116c0d7c508f747_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb846d242922eef65116c0d7c508f747_JaffaCakes118
-
Size
168KB
-
MD5
eb846d242922eef65116c0d7c508f747
-
SHA1
dd59972ed39bd5e7196c09d3e620d156a870f7fd
-
SHA256
7bf4aa17c86a7fb40cdba52ef16b8c51086ff23beb2b7f5b185c4c536e6d8e83
-
SHA512
fc32e5accdb8fc67468810c68823b69207a5f9a203d085c76e6e83b9f3839ee335c9f70d1081ecbc59434d46606939b3441dc637e896a19b8625f2b1c264569a
-
SSDEEP
3072:bcBV8N373imxH9tq2Om6Tt5Rc2POtrjEtkQjHbPS9FXc6jLuulc5NDbkUYMBsV+:Q3+L3Ndtq2Omot5R9POZjBQfP21cfCcC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb846d242922eef65116c0d7c508f747_JaffaCakes118
Files
-
eb846d242922eef65116c0d7c508f747_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c2d3c56017ffc9f272aae4a4d190dcc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
Sections
Yock[US] Size: 123KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Yock[US] Size: 15KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Yock[US] Size: 4KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Yock[US] Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Yock[US] Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE