Static task
static1
Behavioral task
behavioral1
Sample
ebef2a56218d8cb262af08fde1a8e317_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ebef2a56218d8cb262af08fde1a8e317_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ebef2a56218d8cb262af08fde1a8e317_JaffaCakes118
-
Size
512KB
-
MD5
ebef2a56218d8cb262af08fde1a8e317
-
SHA1
1613aee559b78f2d6fe1a10f06050ed1ffdd39e8
-
SHA256
683b09ec2a604d67d2bad418c892ca6df33c374e31c5110fc8af3b58cb0801b6
-
SHA512
8e7aaa378b0db98c7f4cdecac9db3ed9446af6f6161ae6dfec3aa2ee9df881b1d3dbcdb3f647bcbeb924714a3f41fba0c691caf11cde9bfbcf42d8a2c2afb509
-
SSDEEP
6144:JOR7WQ++3N9zFNrgYfYHLKzQishSH5DmqpLv6GvCFIYFAP/1IPvq:IgYfMLusSH5DmGTFcIYFS/SS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebef2a56218d8cb262af08fde1a8e317_JaffaCakes118
Files
-
ebef2a56218d8cb262af08fde1a8e317_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 404KB - Virtual size: 403KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ