Static task
static1
Behavioral task
behavioral1
Sample
eeebc4ff0e72ea2f2a75163dab898203_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eeebc4ff0e72ea2f2a75163dab898203_JaffaCakes118
-
Size
100KB
-
MD5
eeebc4ff0e72ea2f2a75163dab898203
-
SHA1
8cbc696bc9d1dc61b949357c64d02a96812af531
-
SHA256
70d6b2893f07e84f3d8dc2c4669c699671f5b143e17ec7132e40081bb0b5e8dc
-
SHA512
97b96703a8b5262a5c2a5b5d1cd8a8ecd67c37695b7e176b79298dd68522e55f610e521c2629f937fc01e18c39f2f0de0af93a0d717c08682f683338fa023ef2
-
SSDEEP
1536:lDFxy3w9v89D6weCJUWqY59/BUpW5BvNd0V:UIvGDtq+nv4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eeebc4ff0e72ea2f2a75163dab898203_JaffaCakes118
Files
-
eeebc4ff0e72ea2f2a75163dab898203_JaffaCakes118.exe .ps1 windows:4 windows x86 arch:x86 polyglot
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE