Static task
static1
Behavioral task
behavioral1
Sample
eee7788a4b8e4e9c4a6b99bb4e01247d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
eee7788a4b8e4e9c4a6b99bb4e01247d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eee7788a4b8e4e9c4a6b99bb4e01247d_JaffaCakes118
-
Size
45KB
-
MD5
eee7788a4b8e4e9c4a6b99bb4e01247d
-
SHA1
fc178d84cf014c59b56fe47a9916d4b40634a5ec
-
SHA256
f161610e2db839ae3b7d471d1cb92880a7ee75f73ffc5ac23f6f5519eb9f41a9
-
SHA512
1691603d7666153d289866b9a70ec8006d035cffcd01a3b2ad44eb808245976778d05468b0bf8c7092e450d0b193b3199546ea5c0b5ee6b9c0e760f07af33e05
-
SSDEEP
768:AATok6+z+9S/PLC9HZ5KbbPKhGBW5j5q+wiC5UrY8sC+zXnadzNMv33HJ:jTu9S/PLKZ5Kbby4yW55qYLC+jna1NMh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eee7788a4b8e4e9c4a6b99bb4e01247d_JaffaCakes118
Files
-
eee7788a4b8e4e9c4a6b99bb4e01247d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.conf Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nah Size: 1024B - Virtual size: 899B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nah Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nah Size: 915B - Virtual size: 915B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ