Static task
static1
Behavioral task
behavioral1
Sample
ef980fa7fdb810c43f7359cb993579a2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef980fa7fdb810c43f7359cb993579a2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef980fa7fdb810c43f7359cb993579a2_JaffaCakes118
-
Size
323KB
-
MD5
ef980fa7fdb810c43f7359cb993579a2
-
SHA1
b729a532436f84a32c99a62bbbf05bb0c479ab01
-
SHA256
ac24888053f0d39b444b616b6f9804039a7601c43d6f950f07594b6c2064b740
-
SHA512
e921b7b8bbc3fbd47b0a082911456a1c25f509d9b78a7e6eb0669d3f5f9f1fe29c2b92ebf098b2f18a503cf1fe2d99802af57c46ba699add91929c8be344b4d7
-
SSDEEP
6144:UVQrRX2ARJcbKZEwFJVK/YsUprgVOq4rbgZenVW5GJZ2tNYLj8MfsTiP9AdeX:2yd28JyWkgmVaVzYKj86suP9AMX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef980fa7fdb810c43f7359cb993579a2_JaffaCakes118
Files
-
ef980fa7fdb810c43f7359cb993579a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 104KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 155KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE