Static task
static1
Behavioral task
behavioral1
Sample
ec05ce34f25d82c3e4bf35a8ca8ea199_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
ec05ce34f25d82c3e4bf35a8ca8ea199_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec05ce34f25d82c3e4bf35a8ca8ea199_JaffaCakes118
-
Size
115KB
-
MD5
ec05ce34f25d82c3e4bf35a8ca8ea199
-
SHA1
ca5af8fca520132750d1991d8d18fa4cae920680
-
SHA256
c87023f8e6d2c86995ca0c137ea65ebd1477b9a85be2aac55632d4ba53761d81
-
SHA512
6cfd2d7de31dd9152c327f1122b946771e5d4352b48c38f44cf11bca05408280431673ef07363ad4605ced62ab262ee5812c9d23beac24ec14573e8e26128276
-
SSDEEP
3072:iycu95knaqXGLKwftgYrG74JJ+Q2EoB/Y2Gm5vOKLY:ZcuXknaYGmwVgYru4JwQjOY2z5Wt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec05ce34f25d82c3e4bf35a8ca8ea199_JaffaCakes118
Files
-
ec05ce34f25d82c3e4bf35a8ca8ea199_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 109KB - Virtual size: 844KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yvs Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE