Static task
static1
Behavioral task
behavioral1
Sample
eba25c0576d915d3c093e3f953e6bb61_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eba25c0576d915d3c093e3f953e6bb61_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eba25c0576d915d3c093e3f953e6bb61_JaffaCakes118
-
Size
376KB
-
MD5
eba25c0576d915d3c093e3f953e6bb61
-
SHA1
cf9a3fc7e75a2398575f061b05fdb3904e4e1080
-
SHA256
ed395a6e4c805ef94249ee94e544b2a365b882ffe08ee90f15b15beb44e45f12
-
SHA512
9dca63bcd60ab92d9ef908b0b9d774a2df41a39e0ee07e0eae7c8369712fbf80a595572bf5161cc023f103d1e239d63864f69ca7e5bad35edb6681a160622f6e
-
SSDEEP
6144:uooXEKvy294y6wT3Dv9aV22eJ2Tu32F9ByaJHbTZl7yDabrMHXAGoRg0D3LQLnTu:ufXED2q76DvkQx2Tuo9QadTZl7yDgMwX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eba25c0576d915d3c093e3f953e6bb61_JaffaCakes118
Files
-
eba25c0576d915d3c093e3f953e6bb61_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.DATA Size: 515B - Virtual size: 724KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 375KB - Virtual size: 393KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE