Static task
static1
Behavioral task
behavioral1
Sample
eee1c1f56370afc03f38f03659315d18_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eee1c1f56370afc03f38f03659315d18_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eee1c1f56370afc03f38f03659315d18_JaffaCakes118
-
Size
412KB
-
MD5
eee1c1f56370afc03f38f03659315d18
-
SHA1
12a5f1e71f09566f79047d617c6fb3781e207526
-
SHA256
656ddb3f06dff599b592d42a5ee21b577ede4b7f90121847d1ce6440ecc1d0e1
-
SHA512
ba790d7f7c813ccec359de4532191e3a75d36ef83c9d5540419c4a454605538b53655652f9656b5afa9504655f40e97876254165a94e3cde0f85783adc5b19a7
-
SSDEEP
6144:b8h2oGzMLcS3bgBCbZLP+HvBDUACZwncTE8ouDnamf3Aa+EKC:oYoGz7SLFbZLIVCZicQ8RnaA+EKC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eee1c1f56370afc03f38f03659315d18_JaffaCakes118
Files
-
eee1c1f56370afc03f38f03659315d18_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 278KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ