Static task
static1
Behavioral task
behavioral1
Sample
eb9c4335f17d85207020f196ec4a627a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb9c4335f17d85207020f196ec4a627a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb9c4335f17d85207020f196ec4a627a_JaffaCakes118
-
Size
12KB
-
MD5
eb9c4335f17d85207020f196ec4a627a
-
SHA1
ff9f83d787ed166aacbf921726c5b10aec4f6fcf
-
SHA256
e738f0b701b6737d9cdbfc60a9e76f71a40b351479262bda18df5fee9483805d
-
SHA512
4c77ac96d9d9ac2231d213b9fd064a3fdb4ea2593195c7c7199734bec0946a6c59c43d50a3f56988a47dd577aed377bdc0b3e3f8102d1b59751d9c899c4cbad6
-
SSDEEP
192:nXJK2W3l0vdV+olNgNrfVqHTCt6/tB4oxd0gxUl9hBt7Of/k06C:XY2vDlaNrfYHu6lCoxd0WghGf/k06C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb9c4335f17d85207020f196ec4a627a_JaffaCakes118
Files
-
eb9c4335f17d85207020f196ec4a627a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE