Static task
static1
Behavioral task
behavioral1
Sample
ef84fed7158a5099babd4c9c1ccaf69e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef84fed7158a5099babd4c9c1ccaf69e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef84fed7158a5099babd4c9c1ccaf69e_JaffaCakes118
-
Size
153KB
-
MD5
ef84fed7158a5099babd4c9c1ccaf69e
-
SHA1
b0d056da7cad006cf2d833fec1725769e6b9d7c1
-
SHA256
31d326b6e45a83eed0f873665fcd7a593419e7578ec58b280fda13a1222efbf9
-
SHA512
d2af45ab6ad20757e27ec694d55809c84c520b7ba06531f9ac0ef1a2d3ab6a589363027ba06df3af84cfcab392b5cc179237471e1378931a52649c5cd1914d32
-
SSDEEP
3072:coqcX4BBQSo12Rk5EAecfayVYQoW+8X6Lgap:DqC4BBQSo0U5Sy7l+8X1ap
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef84fed7158a5099babd4c9c1ccaf69e_JaffaCakes118
Files
-
ef84fed7158a5099babd4c9c1ccaf69e_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 152KB
Size: 156KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
�v8�P�>� Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ