Static task
static1
Behavioral task
behavioral1
Sample
ef21ae2ec8e97499a422d30e6f5113d2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef21ae2ec8e97499a422d30e6f5113d2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef21ae2ec8e97499a422d30e6f5113d2_JaffaCakes118
-
Size
279KB
-
MD5
ef21ae2ec8e97499a422d30e6f5113d2
-
SHA1
412868c3b23b8ff5a851eb593221f897f6374a4f
-
SHA256
000e70bd4cd9853b2032b60196d54fb2946c8099bb421493fc8bf675c5dcf234
-
SHA512
76ed66bebacf217d4be3f742c634c7c1614c68a7ea6b32b1823ab4ef072a40ff1501fff3b0d15662ee9b2a9c92b90ca98387f7d4f0c47e1159edee061dae51ff
-
SSDEEP
6144:+i2ConwHSg/+BmbZgztmzTTJQM1mYn1MSJk69XpFtkkr:epwyS4mbZrT2MwY6Ak6Np3kkr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef21ae2ec8e97499a422d30e6f5113d2_JaffaCakes118
Files
-
ef21ae2ec8e97499a422d30e6f5113d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
mainyi0 Size: - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mainyi1 Size: 277KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE