Static task
static1
Behavioral task
behavioral1
Sample
ebcff8e91feff12fb709b1a6e68af8e4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebcff8e91feff12fb709b1a6e68af8e4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ebcff8e91feff12fb709b1a6e68af8e4_JaffaCakes118
-
Size
5.1MB
-
MD5
ebcff8e91feff12fb709b1a6e68af8e4
-
SHA1
9721fd8e244ad784a542982463b596298d53e0b9
-
SHA256
290f33f44065812a289f9e8dafc619e2256e657b90bd74080d168fbaa655ce32
-
SHA512
c7cf0f962c870f505d65008715d0ccc98d73fd30f62ded362112572b66243db90b6c24015b95287412c19c3017c42f6f1841ce2edab5330228fd98122c2c057e
-
SSDEEP
49152:b/erQZbd2j8QerQZbd2j8QerQZbd2j8QerQZbd2j8QerQZbd2j8QerQZbd2j8MD:irQZ5rQZ5rQZ5rQZ5rQZ5rQZ8D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebcff8e91feff12fb709b1a6e68af8e4_JaffaCakes118
Files
-
ebcff8e91feff12fb709b1a6e68af8e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ