Static task
static1
Behavioral task
behavioral1
Sample
ef34829defe6dc015ea63afc864e2a17_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ef34829defe6dc015ea63afc864e2a17_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef34829defe6dc015ea63afc864e2a17_JaffaCakes118
-
Size
449KB
-
MD5
ef34829defe6dc015ea63afc864e2a17
-
SHA1
8498b543525ed1c7a162eb90f91d3b2d7607f21c
-
SHA256
9d4d2941162cc875a5c23411f3c33213af2e8c4fa5a2743021e653944688b883
-
SHA512
4efeaf132a358464ae8004072ee220616eff70160ae7318f94c39219226900fa86f34eb343bbc1b874432762a2037e294497c3f5346f3423bb16869f404d2f99
-
SSDEEP
6144:UZfec9EbXDk6RkdKdrG1VVE+IsrG1VVE+Ih/UOPSe570Szp3y:UZWtI6Rk4uPupOB0H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef34829defe6dc015ea63afc864e2a17_JaffaCakes118
Files
-
ef34829defe6dc015ea63afc864e2a17_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ