Static task
static1
Behavioral task
behavioral1
Sample
ec29cde3da7b3ecc05559c85f49541ab_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ec29cde3da7b3ecc05559c85f49541ab_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec29cde3da7b3ecc05559c85f49541ab_JaffaCakes118
-
Size
30KB
-
MD5
ec29cde3da7b3ecc05559c85f49541ab
-
SHA1
dd857fc7a6ba1212ac4545a69c56951f349fa3e4
-
SHA256
5df14dcc529aefc73b59dcc1cb6e41199f5fb6d379b69aaef8ea54f1ede78331
-
SHA512
81edc61b46c51ef08d069d90cdfa7222196fbae211d8038fa6782bb97d2084286df2ee62676b1694efba63212da1a0599e964e519420a292d134e7e89bd097f3
-
SSDEEP
768:gt7G12jlaZ2gc0IEqVXe+qA+2uWU/P9A5SiJDXEFpW3WQl7cCJ1:gt7GQjkDc0InVO+qt2sn9KfDXaIWS7jX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec29cde3da7b3ecc05559c85f49541ab_JaffaCakes118
Files
-
ec29cde3da7b3ecc05559c85f49541ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE