Static task
static1
Behavioral task
behavioral1
Sample
ec2519b69bd6d9ec083c40c5f8940ad8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec2519b69bd6d9ec083c40c5f8940ad8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec2519b69bd6d9ec083c40c5f8940ad8_JaffaCakes118
-
Size
16KB
-
MD5
ec2519b69bd6d9ec083c40c5f8940ad8
-
SHA1
e1601b3e1f12a9d7e330042f1780e95c42e304c4
-
SHA256
2e4b1f4c15d525806dfe973c8e94bdef477e4dddaa0c41070cc9b99b74397fb7
-
SHA512
71ec4bfe5635083a3fb8311d169b3786d9c3f285574d4c3fd9bda7083bd328ee371d49fe1952200da28c4b9f53d29171715d0a19d063a6d5ad41e0aa3d090acc
-
SSDEEP
384:iZ+UcG+MewOuun4npfWqvXC4rNxEoY2m8uzk27X+ZdYgwfAfrvZvTrxdwqOC:iTkMVOz4n7vtrNxDREk27uzHAAjvZvTR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec2519b69bd6d9ec083c40c5f8940ad8_JaffaCakes118
Files
-
ec2519b69bd6d9ec083c40c5f8940ad8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 15KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE