Static task
static1
Behavioral task
behavioral1
Sample
ebde21d2410de4e91721da95f552a6ae_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ebde21d2410de4e91721da95f552a6ae_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ebde21d2410de4e91721da95f552a6ae_JaffaCakes118
-
Size
26KB
-
MD5
ebde21d2410de4e91721da95f552a6ae
-
SHA1
235fcf75d5322c1acd284a65f67e9403b7bed8ea
-
SHA256
cc5728cc711998fc3f1b5f0a0fee29f615d9f6a3b1926d199038411ba8b6fc8c
-
SHA512
9715854bcfb496bf8b0fe3e3ef12a068f8dc9378fb61ab1a84d7abebb21bd09522af759de2d3b95e612c7323fd33fa4fd93af8c96842dbcdd013f1bf2633beb2
-
SSDEEP
768:zLcXYbBfy84uNaDH6toaVxyyHLhg/r4xFa:3rbBfb4ei8HLhgzua
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebde21d2410de4e91721da95f552a6ae_JaffaCakes118
Files
-
ebde21d2410de4e91721da95f552a6ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 20KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE