Static task
static1
Behavioral task
behavioral1
Sample
ebfc57703058eadaf8d03d8ad5a2d590_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ebfc57703058eadaf8d03d8ad5a2d590_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ebfc57703058eadaf8d03d8ad5a2d590_JaffaCakes118
-
Size
124KB
-
MD5
ebfc57703058eadaf8d03d8ad5a2d590
-
SHA1
d5331a84d32d15cf3e94f90fc24f02858f209cec
-
SHA256
b6051bc0c36113b8decb3dfebe5b5ceaf66baa46484122d0ccaa3de26727c047
-
SHA512
fb8f3684230f8ebb01be12150e457136e41f165cc444dc0206796b71a21237c128ee18ee42795de22ed4440e732c834546f6453f2bdb1cd52d945ac35c8c613e
-
SSDEEP
1536:nY6qYWQ4iYWlN9EUkFWW29JefOwUxBNVeG7W2TS4rd3lzGHkU2Ukuap:hWtp4nEJWWgefOwUxBNVr7WVw4Ozxp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebfc57703058eadaf8d03d8ad5a2d590_JaffaCakes118
Files
-
ebfc57703058eadaf8d03d8ad5a2d590_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE