Static task
static1
Behavioral task
behavioral1
Sample
eeca71344d99e3cac84c8748cd87c085_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eeca71344d99e3cac84c8748cd87c085_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eeca71344d99e3cac84c8748cd87c085_JaffaCakes118
-
Size
619KB
-
MD5
eeca71344d99e3cac84c8748cd87c085
-
SHA1
9f1599c5960b3f786eacaf0d1da1205fbcc2f67f
-
SHA256
e993f20f68fb0c94ac81d18b0f2b388b02e49bcec0d94736e4e03b2a28fae3e2
-
SHA512
34be3c8c78573811488fb3ddc4fda355742976b110162c227b725eb13e963c503f33bd8e0efe0ed26dba86fba8e53b8d6cc695aec1040a963c0564889699a60a
-
SSDEEP
12288:IEZEoZiWmzSCmxoQWZYZF3Z4mxxNZIryqVBmk4aXajl:IQEoctBmvW6ZQmXQJDNax
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eeca71344d99e3cac84c8748cd87c085_JaffaCakes118
Files
-
eeca71344d99e3cac84c8748cd87c085_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 248KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 344KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE