Static task
static1
Behavioral task
behavioral1
Sample
ec96b219e8536482ac64afb75d08338d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec96b219e8536482ac64afb75d08338d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec96b219e8536482ac64afb75d08338d_JaffaCakes118
-
Size
101KB
-
MD5
ec96b219e8536482ac64afb75d08338d
-
SHA1
53eb1ac0a28edca2cbc30d6802b8c08bb8491433
-
SHA256
ed0af41b6d67d378488f17870d77d15fa695689e548ba0fc644258bd18d92b1b
-
SHA512
324d7281e0a6fec31f8276d6528ffb12261584ab47b3b6112b17d9c69e9d78e163f1ba69978744e3f5d4f429ad0b44cdff1dce9e5a525e1f02a28a886d891ed3
-
SSDEEP
1536:/mfuxWls99999/1qiTVK/beHzOB3tYJqZiElzeQVOrr9AbkqrYgFxIScbmwPbegh:/mfuYeMRFZZFVnXzIScywPbB5T/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec96b219e8536482ac64afb75d08338d_JaffaCakes118
Files
-
ec96b219e8536482ac64afb75d08338d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE