Static task
static1
Behavioral task
behavioral1
Sample
ef15941f46b7a337da3c3460378b4832_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ef15941f46b7a337da3c3460378b4832_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef15941f46b7a337da3c3460378b4832_JaffaCakes118
-
Size
496KB
-
MD5
ef15941f46b7a337da3c3460378b4832
-
SHA1
dd764f6a3fe082d1a35b006390fb24c6854107ca
-
SHA256
bd590e4c4e6832a9dd85fc00a8cab715b09d4636119c62c99fe377e19a42e7a5
-
SHA512
adf70b8e407fd32958151e4742925c11c0aaff345e0ee9edd3ec516816be4a8e12ce4404c1c5bac4c57d453e749264b80febf4f6a6a2d4e65354c28e819255cc
-
SSDEEP
6144:re7UhKKJs0x0tJhHQo/oy9E96PXY/CH/ikjJY66dX6B2G1FR2Av9GnY:re7h1YMhHr3G++A/ikjed65x2Av9GY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef15941f46b7a337da3c3460378b4832_JaffaCakes118
Files
-
ef15941f46b7a337da3c3460378b4832_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 3.0MB
.rdata Size: - Virtual size: 452KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.null Size: 289KB - Virtual size: 292KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE