Static task
static1
Behavioral task
behavioral1
Sample
eea471b7c167eb4ae3f77a473a5d5ff0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eea471b7c167eb4ae3f77a473a5d5ff0_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
eea471b7c167eb4ae3f77a473a5d5ff0_JaffaCakes118
-
Size
14KB
-
MD5
eea471b7c167eb4ae3f77a473a5d5ff0
-
SHA1
ee3839e3e6dcd91a55949498b0862ca3d25810b7
-
SHA256
1cc747e4601ae49afb865d834d64b56c4ebc9e2d96b3213e31534689f826bc19
-
SHA512
64d219a81bf997ddf81bef5187d42a551fdc94246851909e0a86fad18f3567bdf04e85f592a60a6aba053d72fdb968f1ef9b4be29959e6332ce625869fed918f
-
SSDEEP
192:CRa3OMHEexkeSrNOMNEthQDV2RvVQ8Ib1a0xHYYhhP3+dJiGhRNLAE8e1fNm:EMHE4k9rErtmV2U1FtJL3+d0A3bI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eea471b7c167eb4ae3f77a473a5d5ff0_JaffaCakes118
Files
-
eea471b7c167eb4ae3f77a473a5d5ff0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ