Static task
static1
Behavioral task
behavioral1
Sample
ef5e427bbef4f077284c6738cf58b6ee_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef5e427bbef4f077284c6738cf58b6ee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef5e427bbef4f077284c6738cf58b6ee_JaffaCakes118
-
Size
820KB
-
MD5
ef5e427bbef4f077284c6738cf58b6ee
-
SHA1
422d471cf33c357626f348f431c99140a43dad85
-
SHA256
602ce1d8cf2869eb06d02ef6f3e294d477c4ce9b94442824a49e69966fe44819
-
SHA512
10900506d25e8a5e5becd46bf9cc810e1940802816a197921c0b174a4c6e492a675366e563bb3d6836dc620ecee75c53761c3eec120588430ebed1d129f64894
-
SSDEEP
24576:B/2dLSZMTI3nXseJzjkxzpVP5gJkR2N9XhEHmPP:si3HIQk0N9GGX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef5e427bbef4f077284c6738cf58b6ee_JaffaCakes118
Files
-
ef5e427bbef4f077284c6738cf58b6ee_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 589KB - Virtual size: 589KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ