Static task
static1
Behavioral task
behavioral1
Sample
eeafca3a6a986ee8cc52009ddbff810b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eeafca3a6a986ee8cc52009ddbff810b_JaffaCakes118
-
Size
83KB
-
MD5
eeafca3a6a986ee8cc52009ddbff810b
-
SHA1
5a254ae21439353f21cdf15b79d3550b7470dc11
-
SHA256
ceeb68912f2fe660ac31248b0afaf29b8168524aa183c26514cdb1831e4c79c1
-
SHA512
5f68bf9514bba82497a5fe3bfbbcd7e33ba08cfc3ee2bb15b4f4e65f1690f5caf3848cc958993cbef16567938b48875d7973366c6eac6c402e3bf39d35740431
-
SSDEEP
1536:4RVt16LxgvKESdnVN2HJ1dOWG77t2skCgYab5tI4tN:4jt1+AKtvMHJLOHn4fCgRb5tI43
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eeafca3a6a986ee8cc52009ddbff810b_JaffaCakes118
Files
-
eeafca3a6a986ee8cc52009ddbff810b_JaffaCakes118.exe windows:4 windows x86 arch:x86
d35966244f3e55976bc179d962bce114
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
FtpCommandW
UnlockUrlCacheEntryFile
FtpOpenFileA
kernel32
ExitProcess
CreateFileA
ExitThread
Sections
.text Size: 59KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE