Static task
static1
Behavioral task
behavioral1
Sample
eed3cf09db68cd3281bd72eb9eab5285_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eed3cf09db68cd3281bd72eb9eab5285_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eed3cf09db68cd3281bd72eb9eab5285_JaffaCakes118
-
Size
6.7MB
-
MD5
eed3cf09db68cd3281bd72eb9eab5285
-
SHA1
7e994a05fb1890ff779a02ccd8e54d6397246317
-
SHA256
0ab02b2dc4b7cead835754f0d2950cc11d9298660c596c6ea72cb4daba5d0dcc
-
SHA512
1f0195ed6af484ccf2a576fdeceb5884b8beac1db50b02916e4285275f0f7b80d8a4be1e24c973c42e80bbeeb139fc51e8629f51e90ecc1e239aaaf8075e60dd
-
SSDEEP
768:ToyzZ7iG6u4PtaGhgJ+VqQtKHPsd7MZe8PTSaSftJUJmJ1Ltpgtexlr:97JcaGhWSFKsd7MZe8POHfn/pga
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eed3cf09db68cd3281bd72eb9eab5285_JaffaCakes118
Files
-
eed3cf09db68cd3281bd72eb9eab5285_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 30KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE