Static task
static1
Behavioral task
behavioral1
Sample
ef8cc3b7d2d5641c3d02be616d643e48_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef8cc3b7d2d5641c3d02be616d643e48_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef8cc3b7d2d5641c3d02be616d643e48_JaffaCakes118
-
Size
28KB
-
MD5
ef8cc3b7d2d5641c3d02be616d643e48
-
SHA1
29ecdc8daab9653ad3dfd3273b18b1a587da6fad
-
SHA256
46905a8f7caf8501f1e203ba4e73c773947738c1535c139ecd0f2334f71ad5b4
-
SHA512
0f89e3992fcb17c304555261cc6da6c2839e80c96ab02f8c5d96b82fffd520329dcfe97cef79dbc8b9e5ceb8abbfbcca3e8ef563df7a4279b1c44baf9c148bb1
-
SSDEEP
192:/T0nvK+OuBBKBz33333333333333333333Xvc333333333333333333333vz75il:/TIKX2Bju3tqD9OIQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef8cc3b7d2d5641c3d02be616d643e48_JaffaCakes118
Files
-
ef8cc3b7d2d5641c3d02be616d643e48_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ