Static task
static1
Behavioral task
behavioral1
Sample
ec1ba4dbdae8b25ddd858fd86a85226b_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
ec1ba4dbdae8b25ddd858fd86a85226b_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
ec1ba4dbdae8b25ddd858fd86a85226b_JaffaCakes118
-
Size
45KB
-
MD5
ec1ba4dbdae8b25ddd858fd86a85226b
-
SHA1
a75cb6571057fcab2d6a0e2a610b6b14bd83a53a
-
SHA256
c6178b69cdd671509a9f34d1bf56727ba665de42886ce55cfb32f91f7378a5b4
-
SHA512
c34a18f87f49f5a90244cd596f7d9327db0f6fdf17008b62d66c917c871ec4013bd5a37f22c7c1155d6b54a035cd6e17735f07205371d894d7cd120958a43947
-
SSDEEP
768:cantS8YzXBhOJ080mYJ2IyT8rDi8mW+/lfAdQd+5H+XmXiyjHmzOUJ19rquexXo:cYUFrfOJJ0mYJ2I28PQFlodHF+XY9H2r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec1ba4dbdae8b25ddd858fd86a85226b_JaffaCakes118
Files
-
ec1ba4dbdae8b25ddd858fd86a85226b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: 512B - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 44KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE