Static task
static1
Behavioral task
behavioral1
Sample
eee922858d3a02aeafe018fccde8b768_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eee922858d3a02aeafe018fccde8b768_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eee922858d3a02aeafe018fccde8b768_JaffaCakes118
-
Size
470KB
-
MD5
eee922858d3a02aeafe018fccde8b768
-
SHA1
436613a93ea1eef355ba2225d7507416057448ab
-
SHA256
98ee10bb191f0d0c972def2fe8361783db7efb5fa84ca40f7d061caa2197ecc5
-
SHA512
4006130dd84b7b4512058ac07f76b29c04ce0e0d7d1689898e5c073432c23a849490adcbc9649e63d1a5a034f7de54f1a0216f140ee37debd00f56f9209b1f21
-
SSDEEP
6144:ei5g9p0leMjrq0CDOsza0BOe+i+uCP+b1DnIgK54IQzeeeL4/Qj9:epp07nqpL+iTtIgKKM4YB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eee922858d3a02aeafe018fccde8b768_JaffaCakes118
Files
-
eee922858d3a02aeafe018fccde8b768_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
0 Size: 176KB - Virtual size: 892KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE