Static task
static1
Behavioral task
behavioral1
Sample
ec41e12aa998b1385afffcca3a81ec04_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ec41e12aa998b1385afffcca3a81ec04_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec41e12aa998b1385afffcca3a81ec04_JaffaCakes118
-
Size
796KB
-
MD5
ec41e12aa998b1385afffcca3a81ec04
-
SHA1
4c56b2a6bc149b2c494b221e8e392b1fe5f3c8fc
-
SHA256
ab6e0551eb693c20c090b635cbf5c22b05035fcd68d1643626942673d702c835
-
SHA512
a2da589759271431d3207fa47b6115dee1d1137d6b1007ed847a32ee07047c4f672a643fb37a738a1ffc0123a732fdcb05a816f92a87312e44b7e261776fdfcb
-
SSDEEP
12288:6SHD1Y0khg8nj41/0phOVV0nM5KFVXyoo0obBUDgMoOtXaV:6QY0Ygb1/dVVa2KpoMgMoOtqV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec41e12aa998b1385afffcca3a81ec04_JaffaCakes118
Files
-
ec41e12aa998b1385afffcca3a81ec04_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 724KB - Virtual size: 721KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE