Static task
static1
Behavioral task
behavioral1
Sample
eebef81246deed9d005206bc5e389967_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eebef81246deed9d005206bc5e389967_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eebef81246deed9d005206bc5e389967_JaffaCakes118
-
Size
1.8MB
-
MD5
eebef81246deed9d005206bc5e389967
-
SHA1
782f0ee20c340f07e0b818dc37765677a3bd291d
-
SHA256
f4bdfddeaf909cd9279b1f45d05b314129b3e2f5a70c0d3703f25eaec51083ba
-
SHA512
bc107585beb53d5394759c88c29de7a2213d4fdee9aec18d194e936a6d1e994bacfce505a9bb6536598d7c8b2c853612db498e497c214f5fa361b7d70b955bff
-
SSDEEP
49152:YmVJ5pLKQIVbbXBAc0UmMAkk9zcDX/BKa:3PpLSnWgPosBX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eebef81246deed9d005206bc5e389967_JaffaCakes118
Files
-
eebef81246deed9d005206bc5e389967_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 752KB - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE