Static task
static1
Behavioral task
behavioral1
Sample
ec68e9b600e8ff8835766660f6ec9a9c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec68e9b600e8ff8835766660f6ec9a9c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec68e9b600e8ff8835766660f6ec9a9c_JaffaCakes118
-
Size
55KB
-
MD5
ec68e9b600e8ff8835766660f6ec9a9c
-
SHA1
632fac010bc625c4355762622348819fa3451669
-
SHA256
1b965ab581d5d9519f2fc31bc741efd4ef2024ddf70a38beaa87f236367bbbe8
-
SHA512
3c532ad4ffaab0bc1a09467cce45aa9bc2758832f9dd292df57978f75d3b6012ad7c81ef9bfdf0a05ab3b42928d71dfb96f420a366cc50a8503338e957cc01ce
-
SSDEEP
768:0I07zE0IQZXXn/pp0hdceBi4d3IalnPZk/Rpd1JCmXrz4UwtlWhwlpdtgYnAGkv:0IsnI8H/ghmeBi4JdkpgGhj+pgCkv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec68e9b600e8ff8835766660f6ec9a9c_JaffaCakes118
Files
-
ec68e9b600e8ff8835766660f6ec9a9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.TEXT Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RDATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ