Static task
static1
Behavioral task
behavioral1
Sample
eeae005c23e6816f026f35af72588da8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eeae005c23e6816f026f35af72588da8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eeae005c23e6816f026f35af72588da8_JaffaCakes118
-
Size
663KB
-
MD5
eeae005c23e6816f026f35af72588da8
-
SHA1
e39cd8248498775f0f0c43f47721fad0d69f833c
-
SHA256
c4cfc90cf1f6ad17c1d88e0232f3fdbddffa998cde352f870b3a13b0b2c5c773
-
SHA512
445bb24c72380397a58043c538fc11806bc0ebcbf7a370a3cdb0f6c8f0f80c4fe959656e1ee55dce3ab6c6f7c915c71835c1017f182d9333aba498098226496d
-
SSDEEP
12288:ksz887gwI8mC4eEj6ZfxTTCetqZDmeZUUXed6cA5DY6mS+ID9jLU9:fP4nOpqtmoRepCDY6mGJfU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eeae005c23e6816f026f35af72588da8_JaffaCakes118
Files
-
eeae005c23e6816f026f35af72588da8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 653KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE