Static task
static1
Behavioral task
behavioral1
Sample
efb15906588e7f41590eb55b29bd81f8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efb15906588e7f41590eb55b29bd81f8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efb15906588e7f41590eb55b29bd81f8_JaffaCakes118
-
Size
32KB
-
MD5
efb15906588e7f41590eb55b29bd81f8
-
SHA1
94826347a5e94344479a37f5a05c95a6125938ae
-
SHA256
9f4a9301069afdcbb1ea4733546c36f12eabba9bc883927bae23c56d4a69a729
-
SHA512
2f425ba85a955ac8c1a9b245f2431411a82f0e171746745bcb933915e4a1085bd2f1f511a816cd6a35b6f65368b5fdafa65eff1b8bf773d503ebe8c3e1b4289f
-
SSDEEP
384:/p7opWVpolFQVnUc8tut+mWJzzy2h8fA1X+fWVsujRl1Y6YfdfJMfiL2QsP+HoLp:/pYQVnUNzy2F1X+OrbY0f1PRL3IhK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efb15906588e7f41590eb55b29bd81f8_JaffaCakes118
Files
-
efb15906588e7f41590eb55b29bd81f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ