Static task
static1
Behavioral task
behavioral1
Sample
ebde957f22eecd680bb88be63cfa71d8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebde957f22eecd680bb88be63cfa71d8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ebde957f22eecd680bb88be63cfa71d8_JaffaCakes118
-
Size
250KB
-
MD5
ebde957f22eecd680bb88be63cfa71d8
-
SHA1
db6e49446a2bc246393d969b61203697452b937f
-
SHA256
ace9b1eb934be960e2c2310bc5bb0e147d864aee31374cef54a8f65938ffe8eb
-
SHA512
19091b9a2b16354b0c79cb3b9ed50c980397238ba360436987fa3e6d7dac46c39b21978a6714a156b850933c5421ff7c56acad162c67472e7430fc3573ad7a74
-
SSDEEP
6144:OY94NreBuJF1YhF7Om/HW44EwEdTcKK6WSZI1etipl+QHb:l9OKoFYhF7Om/HWznEdTBNHUjZ7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebde957f22eecd680bb88be63cfa71d8_JaffaCakes118
Files
-
ebde957f22eecd680bb88be63cfa71d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ