Static task
static1
Behavioral task
behavioral1
Sample
ef83cc2c0e8851146da815491d4693da_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ef83cc2c0e8851146da815491d4693da_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef83cc2c0e8851146da815491d4693da_JaffaCakes118
-
Size
328KB
-
MD5
ef83cc2c0e8851146da815491d4693da
-
SHA1
18d444fa24151bfcc4a20778de9554d4a3f37aa7
-
SHA256
e5071f9dc060532bdea55f82fceaa6aaf714d2f1deb4993e31cc41c680fa443d
-
SHA512
1fd3f0a530fbd3677719f0f66faaa2ebb349766b3930e6ed6aec5c256c8ef3c9bb128b303411727ad1614f746fab7c4c8c27dc2266e42e0af38513c4f393aea5
-
SSDEEP
6144:iXSF2idZecnl20lHRxp3g6ncduD7yB9VCO6Sco4q8+dE6Cqyj:iXOF3Z4mxxtDqVTVOC0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef83cc2c0e8851146da815491d4693da_JaffaCakes118
Files
-
ef83cc2c0e8851146da815491d4693da_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE