Static task
static1
Behavioral task
behavioral1
Sample
eba6ad4b3fe8ea9e8e52952a6052b4a1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eba6ad4b3fe8ea9e8e52952a6052b4a1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eba6ad4b3fe8ea9e8e52952a6052b4a1_JaffaCakes118
-
Size
17KB
-
MD5
eba6ad4b3fe8ea9e8e52952a6052b4a1
-
SHA1
c176ea3ae2d5948a0ca3ac42e996c0ceec3e122a
-
SHA256
6185db49f8f6497c60151f32d935d8f3dc1268c983d8a73b32f321b3a224ab86
-
SHA512
d51388e4e1c279978e8d84d8e6e5571f555963690dfbfb94b86cb9ebafc0568e6ae9be7159792aad4432ebf2d9aa4c6fc20f364c0e58ee5af538c2a1ced02654
-
SSDEEP
384:81uowu+Wbi69zU0nSrhBJMtuKkWK0bEOeNXH805qppW0Vhcx:9FWG0nSr/GtuLAAXPAi2ix
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eba6ad4b3fe8ea9e8e52952a6052b4a1_JaffaCakes118
Files
-
eba6ad4b3fe8ea9e8e52952a6052b4a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 432KB - Virtual size: 431KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ