Static task
static1
Behavioral task
behavioral1
Sample
ee8f84c1d5ca12239785f51271c490ab_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ee8f84c1d5ca12239785f51271c490ab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ee8f84c1d5ca12239785f51271c490ab_JaffaCakes118
-
Size
86KB
-
MD5
ee8f84c1d5ca12239785f51271c490ab
-
SHA1
278dda995e54fd185997c23834e8c1ea415666a3
-
SHA256
4017ad24504d2b1ffeec019ca43e8cc7d9e3c56fdd0d567796722b9335572678
-
SHA512
74a31b68463934ca284161e9d7c74fe9e1af9cd4775f7ab6eb5e3e520e34c8f1f98b22bcddcbc83ccb21a9210bb864e35ce289b2203a2fcb4e78f8fd8a89ee67
-
SSDEEP
1536:1iU+XtTWXR6s84q3gbI7jbmxSfX6y1hQMWzB:1b+XtTWXR1DPbI7uy1uMWzB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee8f84c1d5ca12239785f51271c490ab_JaffaCakes118
Files
-
ee8f84c1d5ca12239785f51271c490ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 46KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE