Static task
static1
Behavioral task
behavioral1
Sample
ec98a332cd977a9a9ac05077c481896c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec98a332cd977a9a9ac05077c481896c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec98a332cd977a9a9ac05077c481896c_JaffaCakes118
-
Size
26KB
-
MD5
ec98a332cd977a9a9ac05077c481896c
-
SHA1
51ad4a54dd4bda922a52e5bd33e3be83891d43d7
-
SHA256
ed2f17a9691ad5bb08afb7aa39d465aad7b473e0bcf02efd75b32f5ad1f021ac
-
SHA512
c25780da8947d9ee6600eafb5f6476d3bdc025a0dfeff46fa183e88f81ae69f4db27d206db6170193cc0d7b85217871298e66e89416ee8467475a38539aaf6d3
-
SSDEEP
384:YLaDf8DFvuJsVga52dK0/cTkTR8VTYRth8zRIsq6+6qVZUhGIombbT:YLyovkaAU0/c4TRM0thG1FRqVZUhnb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec98a332cd977a9a9ac05077c481896c_JaffaCakes118
Files
-
ec98a332cd977a9a9ac05077c481896c_JaffaCakes118.exe windows:5 windows x86 arch:x86
9c5d7fab56ca149886b8a9ccaf0b1dc9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
GetConsoleAliasesLengthA
FreeEnvironmentStringsA
user32
SendDlgItemMessageA
SetClassLongA
gdi32
GetICMProfileA
EnumFontFamiliesA
Sections
.share Size: - Virtual size: 27KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.��� Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.��� Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 884B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 343B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ