Static task
static1
Behavioral task
behavioral1
Sample
eeee469508ea79235497535ea585fe12_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eeee469508ea79235497535ea585fe12_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eeee469508ea79235497535ea585fe12_JaffaCakes118
-
Size
184KB
-
MD5
eeee469508ea79235497535ea585fe12
-
SHA1
b2565fa09573a822532d58cd483d6cd8c7dda05e
-
SHA256
e2eb7383af55b6a83270bfb0411615667909305ba8d00bc2bc68125e987db4e9
-
SHA512
7cc0a422fd58379a92a917ffdc4fe1100b1db761f0405cf5e4c7176e4a824eb6a9a44806723d0c576a41ecd08f335429e88a7323a041849e2a9bd9553253976a
-
SSDEEP
1536:lAzjRpngfsaHv3eJYaHijV2ld+VpbJ0takoy8uzih62CJ/UYK1ibdEIQEzUxAmiU:lqRd9+vT9jV2z+PMzihrgUNOpQEb9f5q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eeee469508ea79235497535ea585fe12_JaffaCakes118
Files
-
eeee469508ea79235497535ea585fe12_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ