Static task
static1
Behavioral task
behavioral1
Sample
ebf299ac565e01cecc341898bd8d9ab0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebf299ac565e01cecc341898bd8d9ab0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ebf299ac565e01cecc341898bd8d9ab0_JaffaCakes118
-
Size
1018KB
-
MD5
ebf299ac565e01cecc341898bd8d9ab0
-
SHA1
6e36619fddc67913418df9ed41c7dc05b04475c1
-
SHA256
35d7af976238c6c4a63235bf337cf502c0c0ee6f1d48bc8ede852c6c034c9a64
-
SHA512
5d3b0bb2b408c51453dace57d547b46f81489aeb04b68d4488bc69bcdfe43c2c4f5d2e95c8f97186db869547213ee14f66637af7d26ec711a9c10629ae897978
-
SSDEEP
24576:5g06cm8a44Yp5yqp9osk0koaJnG4boz/Hglpr:68jIU9Lk8aJnGGo0lpr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebf299ac565e01cecc341898bd8d9ab0_JaffaCakes118
Files
-
ebf299ac565e01cecc341898bd8d9ab0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 708KB - Virtual size: 705KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ