Static task
static1
Behavioral task
behavioral1
Sample
ef384f808164b00a5eafaebd1a25cb5f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ef384f808164b00a5eafaebd1a25cb5f_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
ef384f808164b00a5eafaebd1a25cb5f_JaffaCakes118
-
Size
29KB
-
MD5
ef384f808164b00a5eafaebd1a25cb5f
-
SHA1
f0744b03a8ab944a9d662fbbbdbd232ca2fbcf57
-
SHA256
4c82432319ed89b9cc9c30c3a3942459a226cce3af4ef50119ee32f53b4e7aad
-
SHA512
f2b0b8171ea62d6f312af9c412a86c21f6bc9141f8864c42262624eae2dd71301cd69b3a58a93c05566c0647bc31fa6701f2a61920dfd9c252b010c0ed0633ad
-
SSDEEP
384:7NQca9SleAGMsH1iVVutiKqnu3g28pufORrH1W7eqC9OWAwZruEk:7NQcaZDVizutituQ2kH5W7DIOWAwZnk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef384f808164b00a5eafaebd1a25cb5f_JaffaCakes118
Files
-
ef384f808164b00a5eafaebd1a25cb5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nah Size: 1018B - Virtual size: 637B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ