Static task
static1
Behavioral task
behavioral1
Sample
efaab30038bca4af2e3105fac4d87fa8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efaab30038bca4af2e3105fac4d87fa8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efaab30038bca4af2e3105fac4d87fa8_JaffaCakes118
-
Size
119KB
-
MD5
efaab30038bca4af2e3105fac4d87fa8
-
SHA1
34809f3579781dd87357bdbdba49d4fe5c7e1206
-
SHA256
37b97fbf7492280aafefc5f5f5be0c836fa8352f33b605cfd8f9ac2ee8197c48
-
SHA512
adda6ca4dd13301560a980d18f213baa46bfe0b5c866c9dd7070f4028bac90e7bbd4e8630c3c7468e3b6a3a2a3c44e0c9b392f86086c205f7e7a4ce78421cc47
-
SSDEEP
3072:x/bfpNRDamNdf6S+OjRRA2JPldFKvpE6IyaM0Peour:BTVamNxrDAWldgvpE6wRLk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efaab30038bca4af2e3105fac4d87fa8_JaffaCakes118
Files
-
efaab30038bca4af2e3105fac4d87fa8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
DATA Size: 65KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 32KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ