Static task
static1
Behavioral task
behavioral1
Sample
ecb24c401548e8528f4d2248d250fde1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecb24c401548e8528f4d2248d250fde1_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
ecb24c401548e8528f4d2248d250fde1_JaffaCakes118
-
Size
284KB
-
MD5
ecb24c401548e8528f4d2248d250fde1
-
SHA1
2d0004874162daac8096c43b381bc9558fd3515e
-
SHA256
ea0c2d2d49f00d41964ffd6deda33a9f88cf85a2657037af3e523269c5bfb0a4
-
SHA512
164575d8857c779661848a65cbbbb6a0ebf41f844da3bf8713eab7a33b18ee16d9bfe5946cef72d936bc580dbb71b151309c1aab857c5330c001101903d4d549
-
SSDEEP
3072:+Kx9Bs7gZPp3gXdqHiIyyLl8/BLkcUiRKhmhoLwABfTe:+afXGQHi0ufBRkxUABbe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecb24c401548e8528f4d2248d250fde1_JaffaCakes118
Files
-
ecb24c401548e8528f4d2248d250fde1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE