Static task
static1
Behavioral task
behavioral1
Sample
efbb7e7a626c0d0a98f8bbaa8b12a13e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efbb7e7a626c0d0a98f8bbaa8b12a13e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efbb7e7a626c0d0a98f8bbaa8b12a13e_JaffaCakes118
-
Size
40KB
-
MD5
efbb7e7a626c0d0a98f8bbaa8b12a13e
-
SHA1
8630460cf97048340d6966e6a490c13b4b8a5a87
-
SHA256
1c0006aff641b79f3dde2d6804ddd5e135a6ba80ce012978d049f71d4b81eef6
-
SHA512
1aa75be8d130efb1d4fb579f848e1e3bbbc9aa8465ffbdf5f3038aedd0f6f80f75ad0f76bc2e44eb5cdb6e031da96c6fc40b302c586517d129a355f5c83ce425
-
SSDEEP
768:sLf0uyLAi2h3xCcIlnfRFWwmdr/SDojDe2m4h1NsgMmbnx:S01L4BClnfGWuDe2Vh3dnx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efbb7e7a626c0d0a98f8bbaa8b12a13e_JaffaCakes118
Files
-
efbb7e7a626c0d0a98f8bbaa8b12a13e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 106KB - Virtual size: 696KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE