Static task
static1
Behavioral task
behavioral1
Sample
eefaa9b052cd6cc3fc30e1a0a0219035_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eefaa9b052cd6cc3fc30e1a0a0219035_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eefaa9b052cd6cc3fc30e1a0a0219035_JaffaCakes118
-
Size
139KB
-
MD5
eefaa9b052cd6cc3fc30e1a0a0219035
-
SHA1
7700ff96f71d4e0c69707533f2e3e3381fefa14d
-
SHA256
e242dd47156321202dec9c90bc9fe0f3c4961610ce6ecddd588542aee908db05
-
SHA512
170adf859b03947c5c5f483bb3cae1407cbdd0fcc680606c62a7a05028e856d786a2883d36703597c09e16fcadf2d3a89f1c32d653f7034f19f7bb85f19e7a2d
-
SSDEEP
3072:zH+Mcv5JXXieDEvy1W7rkD+bnAIhRjaN0:zHl0ndEqgkCAaRG+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eefaa9b052cd6cc3fc30e1a0a0219035_JaffaCakes118
Files
-
eefaa9b052cd6cc3fc30e1a0a0219035_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE