Static task
static1
Behavioral task
behavioral1
Sample
efb8e81d77f74ccc6b1862fd2bc57db3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efb8e81d77f74ccc6b1862fd2bc57db3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efb8e81d77f74ccc6b1862fd2bc57db3_JaffaCakes118
-
Size
95KB
-
MD5
efb8e81d77f74ccc6b1862fd2bc57db3
-
SHA1
ae2e51a7db911c04fcc4c7f0ea117fc6f907392d
-
SHA256
67dfc20b6177c943ed7904b2ad2d0869043fcb2e85dd146b3fda1db68fcaf913
-
SHA512
38d5a55c43c2f900ed2901f68ae8d2e0412d3d91411c3a96bb2734a53041d25929cd710b0c52b0feb62a2bed9abb5c722a28ebcca76af330d096db96253f5fdc
-
SSDEEP
1536:9YQvq0j2SkbdJh8VpyCyvLOOL4f40qyaP4v8eKZ0bycWRDPduERYk7lugYG6jzQF:9lvj8dJhCppf4G8aXKGWcWRDPdvYk7lH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efb8e81d77f74ccc6b1862fd2bc57db3_JaffaCakes118
Files
-
efb8e81d77f74ccc6b1862fd2bc57db3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.0288000 Size: - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0288001 Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0288002 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE