Static task
static1
Behavioral task
behavioral1
Sample
ef1b034791c32fe25c06449ac334b7e3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ef1b034791c32fe25c06449ac334b7e3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef1b034791c32fe25c06449ac334b7e3_JaffaCakes118
-
Size
59KB
-
MD5
ef1b034791c32fe25c06449ac334b7e3
-
SHA1
1f234816b8c119e59a150ee4cea07cf306c66cee
-
SHA256
f5e561d438d42b744e79c550a702cf74dd811a0e8c71e8281f5e14f061fafe26
-
SHA512
5c9af7a109ebe55bb8de692d39b11d1bf8f2841fa6521ff0f3ace34a7f7f77392dc06196abd12af09b469b76ed243ea1f02467ed6f782c2aa2c6a61e3d4405dd
-
SSDEEP
768:iOynSiAlCWymj1TtEMziOLnH0tgX7kFwS76B8Nj6clYbTk5FJBU8k43PmfzYcCeZ:mATj/VLH0tgLCVy87lYb45FJmdQmNBb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef1b034791c32fe25c06449ac334b7e3_JaffaCakes118
Files
-
ef1b034791c32fe25c06449ac334b7e3_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ