Static task
static1
Behavioral task
behavioral1
Sample
efa6836e2650adbc6f4d97cc99f7abe1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
efa6836e2650adbc6f4d97cc99f7abe1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efa6836e2650adbc6f4d97cc99f7abe1_JaffaCakes118
-
Size
1.6MB
-
MD5
efa6836e2650adbc6f4d97cc99f7abe1
-
SHA1
a5be517a2ffd9be6a816f1f52529de689b2c2fda
-
SHA256
7a5f0caf96e645ff816d1142e2f93945b3138bfa310ba94cb242dcbfb322c28e
-
SHA512
ea8624bf50c0dc5079c4b37a1d4bfc81f0f403e14e9c940d3b34635a642ad6e892c7bb92e57ad1fc6c2a9a5dc001e6e891b3d5d690a1be4247b0a36594d1379e
-
SSDEEP
24576:Z+sUOItxICGXXo1bXV2MBQ7Yyo7WPIu6CGtIOII6g437ofMevWvXZX3X0zOIuPdf:ZU2HEDcYJWPXGtIOII6goJzvpX0i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efa6836e2650adbc6f4d97cc99f7abe1_JaffaCakes118
Files
-
efa6836e2650adbc6f4d97cc99f7abe1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE