Static task
static1
Behavioral task
behavioral1
Sample
efe484dcc5aed9b66d44460e7f145864_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efe484dcc5aed9b66d44460e7f145864_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efe484dcc5aed9b66d44460e7f145864_JaffaCakes118
-
Size
111KB
-
MD5
efe484dcc5aed9b66d44460e7f145864
-
SHA1
cfb18b4ef580357f153eeb6cbb95acf77d2d677c
-
SHA256
1365ec42644e8a45710034d0b99f221d793b602d96d9099d132bf57204e29ecc
-
SHA512
90990b1a4264a7ac38c530327f28fc217d812784861da53e5b712cf8e0e05d5b10e50fcd67d5435a4c2c6118663a15ea8f0d0a5304c9f2a05674cc777ec91407
-
SSDEEP
3072:7+J/16JWuD8KA8jollKNraBOfF3zTmT/g2/bGgq2T:6J8EYLA8z1fF/q/TG3E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efe484dcc5aed9b66d44460e7f145864_JaffaCakes118
Files
-
efe484dcc5aed9b66d44460e7f145864_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
l7js7297 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aaz Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gx Size: 425B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE