Static task
static1
Behavioral task
behavioral1
Sample
ecafbfae785111effbd8a59674da5ba6_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ecafbfae785111effbd8a59674da5ba6_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ecafbfae785111effbd8a59674da5ba6_JaffaCakes118
-
Size
74KB
-
MD5
ecafbfae785111effbd8a59674da5ba6
-
SHA1
2a77c611777332869d28fec4ed788eda9fe52984
-
SHA256
198c57f878b61bd39c6ae3fc5391d35c2b5ec13ab1f6ded1b154cbc749c9d0bb
-
SHA512
4a55290f086e8bdf8cfeecc337fd2c4a1e19ceaa8a4fdaee72b92cdc4d17ce5f739b71c11d20345a46eaa124f5c4afd691922fa6841ff38aaaa5c941c4e5ffa6
-
SSDEEP
1536:C3bDl0HClxaEYJdwcU64wzY2g84eQRc0/6a/bf3pZIe/:I3l0HAxnYHU6gqIT/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecafbfae785111effbd8a59674da5ba6_JaffaCakes118
Files
-
ecafbfae785111effbd8a59674da5ba6_JaffaCakes118.exe windows:4 windows x86 arch:x86
f11f9d43992b002b8d32d99190434e0a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.packed Size: - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE