Static task
static1
Behavioral task
behavioral1
Sample
efcb57447bb117e79f1e748365ddcd11_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efcb57447bb117e79f1e748365ddcd11_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efcb57447bb117e79f1e748365ddcd11_JaffaCakes118
-
Size
82KB
-
MD5
efcb57447bb117e79f1e748365ddcd11
-
SHA1
33ceb91d2d0a9e8bc55142a9eb126ad54b8cb20c
-
SHA256
d7ab5e20d35b7a6b4f24baec3bda886db8fb470979ccae5c885476040a45e13f
-
SHA512
38ba98ac34d7e8473063b8b315c9ead3228d3bdb49656b6c9fb051d707240167680c2020b29a82f0cb0c52f0cd8b14c72c84f7decb568c395c698c95077475ee
-
SSDEEP
192:roJTweRfN6jMjnYNehGorFlDq/v9Lb3kFLTbbs+T/IdJlbQSp1l0yYENuWRZCCXr:eweRVQZmrFkMcp1lmEAWPn0vm0Y4DpG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efcb57447bb117e79f1e748365ddcd11_JaffaCakes118
Files
-
efcb57447bb117e79f1e748365ddcd11_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
1 Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 805B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE