Static task
static1
Behavioral task
behavioral1
Sample
eeafdee088af134c39754c92947f2314_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eeafdee088af134c39754c92947f2314_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eeafdee088af134c39754c92947f2314_JaffaCakes118
-
Size
111KB
-
MD5
eeafdee088af134c39754c92947f2314
-
SHA1
09f7650859d44a4964e886cd0bb1f8a109d982d8
-
SHA256
128cffe95b9cc52ced3a99b07f087a668d3ce34d27ecefd23bd9084c2c333a33
-
SHA512
e254dc82528f2510ba3e08489a0e89c4d3e7f314130002cccec7cfaa743e0a06b36f5d3640a41f5d5c83a1b8939eed2cef51796d449a648c7b96736e8f93a5c3
-
SSDEEP
3072:WsbblWb5T0g6O18ZPTqbIXMJcGA+1+Qf4EhhF4VUhrJlxLB:Wi45/cLqbE+1+lEC2hrJlxN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eeafdee088af134c39754c92947f2314_JaffaCakes118
Files
-
eeafdee088af134c39754c92947f2314_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Ramzey Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE