Static task
static1
Behavioral task
behavioral1
Sample
ebcd386ad6ea025979acb815a023d03c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ebcd386ad6ea025979acb815a023d03c_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
ebcd386ad6ea025979acb815a023d03c_JaffaCakes118
-
Size
5KB
-
MD5
ebcd386ad6ea025979acb815a023d03c
-
SHA1
a8874d414047e47d77192b24bdc4ed61d045ec32
-
SHA256
dca97fd400de5001c9cb2bb089e39da77ef8b77748d8d2ddfbdc410eae8bca5c
-
SHA512
59d8372247d8c74bdbf0009d69eb61eef881b24bbb1517f8265bc578402e3523d8ba707657b693f1840349c9e9ba9ca91add639d9d5c3ed56064ad51f29e9a79
-
SSDEEP
96:2NKjUXUMRXAvb3XGKqDijkBt011+pW+j9WstRcTf1lO8AYvq3z6KEOADQftLrNwU:2PZRXujXGKqDiQ0HWvj8gRUf1lsYAlEo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebcd386ad6ea025979acb815a023d03c_JaffaCakes118
Files
-
ebcd386ad6ea025979acb815a023d03c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
text Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE