Static task
static1
Behavioral task
behavioral1
Sample
ecd138fcb64f5abada3107177f0df84a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecd138fcb64f5abada3107177f0df84a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ecd138fcb64f5abada3107177f0df84a_JaffaCakes118
-
Size
148KB
-
MD5
ecd138fcb64f5abada3107177f0df84a
-
SHA1
d6622a7e85772c660853b10975e789dc7f071b8f
-
SHA256
3c7b82a9aaa8c29b9d5b460a7b0a8e3fde7adf4f05fc481616b145126560081c
-
SHA512
41bf33ac4b87f2681ee14ce9ec93218cddf79536b77b9a246d537a906e60ca25c4de9a84d7fc88060a32721c2ba34b6e69108b1d69c9047913a63c2fe42a64bc
-
SSDEEP
3072:fzzRk3mZ1iS65f/UwwH/0CLF00nDlmd2E7xD8fbNnV2ZwA9/6tnuWA8HfH1CEvP1:fvRk2ZaczbK9jST5qXJkGC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecd138fcb64f5abada3107177f0df84a_JaffaCakes118
Files
-
ecd138fcb64f5abada3107177f0df84a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 508KB - Virtual size: 508KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ