Static task
static1
Behavioral task
behavioral1
Sample
ef5d9ff0664df90b9bebe07354d09112_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ef5d9ff0664df90b9bebe07354d09112_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef5d9ff0664df90b9bebe07354d09112_JaffaCakes118
-
Size
6KB
-
MD5
ef5d9ff0664df90b9bebe07354d09112
-
SHA1
6e62a309aab9f4b181d435ba37eeddda2cb554e5
-
SHA256
92bfbd1662fe7177f587562f587f05dd0432b4b35c18266b02e2a4e53f0b6f71
-
SHA512
c371c2d9f8b694f674964c57502ec962a2f85da8d0e2ba9fec26a9a9d7b1fe6c593c2bce61336260347ac895444469a4a614d22c440a0e889d2f687cecb5134f
-
SSDEEP
96:nP5WKgQfiai65Ug9q6KX4kp11/3/GTQ+75dtUKCgUGXI7qHGJeUI:nsQfiJ65JqhIkp1J/UN75dtUDqXI7qHD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef5d9ff0664df90b9bebe07354d09112_JaffaCakes118
Files
-
ef5d9ff0664df90b9bebe07354d09112_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 53KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE