Static task
static1
Behavioral task
behavioral1
Sample
eec0322da10e254e9251a361c264cff8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eec0322da10e254e9251a361c264cff8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eec0322da10e254e9251a361c264cff8_JaffaCakes118
-
Size
220KB
-
MD5
eec0322da10e254e9251a361c264cff8
-
SHA1
7504d567d5b89548c0ca288459b06ba75d591ff8
-
SHA256
3e8a151fd33db724414b724862cd907697a9d7587f3a94a1801f5fc96fff2964
-
SHA512
55901e23779185b89837c5183f6236798eabe444d1c84d33a50eac0732c59a186fbd24949d3c34d42e3b071eeac599eabb62de06a6b235bb4fb91e066c632fba
-
SSDEEP
6144:LY3jr7GJvc7lV0Jzlyh7lvsmcj2+PLnKx:LlBwV06h7rH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eec0322da10e254e9251a361c264cff8_JaffaCakes118
Files
-
eec0322da10e254e9251a361c264cff8_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 196KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE