Static task
static1
Behavioral task
behavioral1
Sample
eb9fa3b24420d18f60ded1a9f9d31103_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb9fa3b24420d18f60ded1a9f9d31103_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb9fa3b24420d18f60ded1a9f9d31103_JaffaCakes118
-
Size
31KB
-
MD5
eb9fa3b24420d18f60ded1a9f9d31103
-
SHA1
119130c7edc1990d0a0ad85e2dbb82252ae15498
-
SHA256
41faa36b1d0ac543dd503043aacc1ee6d6895dd3d149cf71035c42753de89b47
-
SHA512
df0672131cc4f3f5aa834baced4a149d3d9d27cf51eb6e01270cbbd08c2136797b7607ea54dfde5ab04c5400eee5f6efe8f9a895cc2abad8853bddae412343c8
-
SSDEEP
384:76sxnt67HAYkkUD+jk2RdfZTooOgsDsnMq5RN409of+tHlLm4UBW67IymDMuFpW1:76slt6caUv2t5OgnDNg+7m+6UfRF1e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb9fa3b24420d18f60ded1a9f9d31103_JaffaCakes118
Files
-
eb9fa3b24420d18f60ded1a9f9d31103_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�1�000E0 Size: 22KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�2�00060 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�3�00060 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE