Static task
static1
Behavioral task
behavioral1
Sample
ebad1565a57049cc945805e803f1e562_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebad1565a57049cc945805e803f1e562_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
ebad1565a57049cc945805e803f1e562_JaffaCakes118
-
Size
1.8MB
-
MD5
ebad1565a57049cc945805e803f1e562
-
SHA1
7e973b5993a3d9091a59bd4fb9aba61693c8ee6f
-
SHA256
b584fd5433d632aa99dca6d74bb54c538c575c2e120b5a42e9ab3ba001dcf143
-
SHA512
4879e6f07cc05b0de9f4fae1a4909f7667b9d2ae98e6704b82abd23ec280f750855225f9f5f61c2d485abb7351ea886f07b6ebc9c4297d974d91c79f78aa1190
-
SSDEEP
49152:MeucdlvadiF32fteZFRaSINSAubGP/B8GpIN37xZuo:ModMYF3EM5OSrbGPzqNR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebad1565a57049cc945805e803f1e562_JaffaCakes118
Files
-
ebad1565a57049cc945805e803f1e562_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ