Static task
static1
Behavioral task
behavioral1
Sample
efabcf9a52863bd69e3d812a3b251e9c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
efabcf9a52863bd69e3d812a3b251e9c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efabcf9a52863bd69e3d812a3b251e9c_JaffaCakes118
-
Size
627KB
-
MD5
efabcf9a52863bd69e3d812a3b251e9c
-
SHA1
7f088b13500aadc947c38787790e4a9cf9f6df7c
-
SHA256
7c3010e7b16480926b90592d2425940567b4e6477986d37dded04a5f6d9824ec
-
SHA512
540e0ebb66ba1d9d6ced495e3847cd666b2bb5fe16b9720d74a87123cdef512cbab32b14968da8728e2873375a7033b5263001c92e2eb636d55941c8f00e5e91
-
SSDEEP
12288:m5FamSDI6VasHwGvpnHb529ODDfaR+UcXDueBxM+1yJd1aQQxbPhY5e:m5RSMWHvn753faRXiDu/+Ad1hU4e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efabcf9a52863bd69e3d812a3b251e9c_JaffaCakes118
Files
-
efabcf9a52863bd69e3d812a3b251e9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.9MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE