Static task
static1
Behavioral task
behavioral1
Sample
ec99990011006826e77939738e2712e7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec99990011006826e77939738e2712e7_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
ec99990011006826e77939738e2712e7_JaffaCakes118
-
Size
14KB
-
MD5
ec99990011006826e77939738e2712e7
-
SHA1
9ff076bd1387b5c190951d01bbc0a96d85e06347
-
SHA256
d55201a46f2c1c317047765f61f91aa32dc321331a53ef6749d8d71e785e7b94
-
SHA512
c8408747af07204315738ca003fcbfea3d11c98e33b49e3c2b33198b6384847a7f473eaa6176f1892b03537e8f8ed8f6d7cd507d1211f93e361d18b1f1fd4593
-
SSDEEP
384:jMBxovtKPr7JSkwbT3lAlGQEVay20CVEDL50X:jdkr7JSFSbiay2HVEDLqX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec99990011006826e77939738e2712e7_JaffaCakes118
Files
-
ec99990011006826e77939738e2712e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
myow0 Size: - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
myow1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
myow2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����4� Size: 30B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ