Static task
static1
Behavioral task
behavioral1
Sample
ef2d25143ba1280a1858be730e5ebfce_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ef2d25143ba1280a1858be730e5ebfce_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef2d25143ba1280a1858be730e5ebfce_JaffaCakes118
-
Size
83KB
-
MD5
ef2d25143ba1280a1858be730e5ebfce
-
SHA1
ff68a33a691b093dc4d4d8bb636da504bf53a67a
-
SHA256
01dc4d01ea5d3f33c5f29fae7985bff71aa028355557a4d275e9e1b405b58203
-
SHA512
dd6cc40f0f4c1a99e4c58714673e53954f7f03b0bea9cc65c804392ae21a7ae63c3561fa7fd5c96e244ec8399dcfa78aea4290efb6ee2d636d1373619fde43c7
-
SSDEEP
1536:hJYXT1Ft0Ss0m3X65snzBMzqw+YC7S4hSp+n:h2XT17s0snzBMOw+7Ntn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef2d25143ba1280a1858be730e5ebfce_JaffaCakes118
Files
-
ef2d25143ba1280a1858be730e5ebfce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 60KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oli Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE