Static task
static1
Behavioral task
behavioral1
Sample
eef6ec9f309fd273c4c91e47168b2ee0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eef6ec9f309fd273c4c91e47168b2ee0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eef6ec9f309fd273c4c91e47168b2ee0_JaffaCakes118
-
Size
206KB
-
MD5
eef6ec9f309fd273c4c91e47168b2ee0
-
SHA1
660a9984b262ae2112ff490c5c8cff1424a87373
-
SHA256
b25b50947a703fdf78fa964d6acd1d11fe9fe7c8b12878b5afbd0c07e86ab3fb
-
SHA512
759773f9a5bcc89026bee52a3c21e10b8531bd5386443ec1fbf62fb6a70d465b4002b0281a5a3af71f1203a3c7f32e51599fcb02f04149ba54b0e6daebff1ec2
-
SSDEEP
768:zwGFcfP1fPNBifOYTfsI53U/gdZ2g0x4ChDE1IzAMqsLl:zwGe5PTifOYTHhUwZyFD4a9Ll
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eef6ec9f309fd273c4c91e47168b2ee0_JaffaCakes118
Files
-
eef6ec9f309fd273c4c91e47168b2ee0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ