Static task
static1
Behavioral task
behavioral1
Sample
ec20c5c7f630bf42759417f6dc42d643_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec20c5c7f630bf42759417f6dc42d643_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec20c5c7f630bf42759417f6dc42d643_JaffaCakes118
-
Size
45KB
-
MD5
ec20c5c7f630bf42759417f6dc42d643
-
SHA1
e97169f234f8454a7449c80379dfa13b910c784a
-
SHA256
83fda3d23e4f088fa19bfdc825c3ea15452c0e89c27679cf84400d62ea5edbdf
-
SHA512
3fc1afa1a6be693baa201927c4f32c116fb543f67d8a215d9be74f564de781bd8f0b84a1b654b2d92f8fc83fdc2506e0c8049ac908b75622c36728353e864a54
-
SSDEEP
768:s/gq7MFbKsHmvxEPRmZc96xwKMDQILuVyKPBlEZ4cVK:gJ7kKsHmuPMZzf4QHyKg4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec20c5c7f630bf42759417f6dc42d643_JaffaCakes118
Files
-
ec20c5c7f630bf42759417f6dc42d643_JaffaCakes118.exe windows:4 windows x86 arch:x86
2eda502d39734c2a70c5e0d029966397
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
ExitProcess
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ