Static task
static1
Behavioral task
behavioral1
Sample
eb34c3a55c1fce38f2548a0105ed03b2_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
eb34c3a55c1fce38f2548a0105ed03b2_JaffaCakes118
-
Size
123KB
-
MD5
eb34c3a55c1fce38f2548a0105ed03b2
-
SHA1
154b15afec34d139a24fa32ab73d5f5f5a7d3fd8
-
SHA256
fb6643aa618e40109c1238bcf9513d73aa3636318c742589bc0ff612ff9a6eed
-
SHA512
f308270befb08840fc6ced454ceb63e79ba79b13a3b4f24aac08dc83ce79c0a638dad6079c10d1a896c3d62750e140b7a409227e643a07cc59484f92e20ae8a7
-
SSDEEP
3072:Spha7NPwa3sZSQs2exCCGb+ENawVyyw/W/9Zcu:mclw78Qs2pCNyXVyywu/9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb34c3a55c1fce38f2548a0105ed03b2_JaffaCakes118
Files
-
eb34c3a55c1fce38f2548a0105ed03b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vzghrso Size: 68KB - Virtual size: 68KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE