Static task
static1
Behavioral task
behavioral1
Sample
ec50918413f77f9b1b3b61e8257a5bb7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec50918413f77f9b1b3b61e8257a5bb7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec50918413f77f9b1b3b61e8257a5bb7_JaffaCakes118
-
Size
438KB
-
MD5
ec50918413f77f9b1b3b61e8257a5bb7
-
SHA1
9041607970962a5cc94ce2a10aeb0e7152b02e6f
-
SHA256
18706aa09596e9ec314ed09b38edb2da97b38872ce8695b1f18a2a8ced58093f
-
SHA512
119bbcf5c160741f6fac7a33f275521a442d7796f6128f7a02237aa8e24f05a8336434f015d28b0d51f0115db758e5a1f0336e3f96b96c9bec73d8056c01efbd
-
SSDEEP
6144:ZXD4MF8nI9/CJl7bCkCv9DW67sXyYyP9ZrMdlOvMW3+tkkvyzuEZXngZVlfl9boF:VDnF8v6kC1DW67akMKL3+tN9MiVltJK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec50918413f77f9b1b3b61e8257a5bb7_JaffaCakes118
Files
-
ec50918413f77f9b1b3b61e8257a5bb7_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 362KB - Virtual size: 362KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ