Static task
static1
Behavioral task
behavioral1
Sample
ef42c4dac170a5fb4de5a269d2bfa547_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ef42c4dac170a5fb4de5a269d2bfa547_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef42c4dac170a5fb4de5a269d2bfa547_JaffaCakes118
-
Size
13KB
-
MD5
ef42c4dac170a5fb4de5a269d2bfa547
-
SHA1
d975a70365400efabda19483e69e2d8beab87dc8
-
SHA256
1194b54f6fffc93c57107dc7420e8882157dd8f0bb794f93182ea256987f9c9e
-
SHA512
3eac29776a3be49461391fac3483cb83e3d49f3e6927707982ba2b80a9b721c1a6c7ebf6ce485a11ee66615be984a60b6ddebc901077ceed95c11ce0efdb14cd
-
SSDEEP
192:8tNg13Mxkj+6fyNa1JeriFHd7Dj+1XZx92LFkM8A0Tr2L8pYSRBXYlLF:8TgFSC3fyNa1J+29b+tZnwFEr2LtbB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef42c4dac170a5fb4de5a269d2bfa547_JaffaCakes118
Files
-
ef42c4dac170a5fb4de5a269d2bfa547_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pep Size: 50B - Virtual size: 50B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE