Static task
static1
Behavioral task
behavioral1
Sample
ecd48373c53cda9225bac9ad71406138_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecd48373c53cda9225bac9ad71406138_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ecd48373c53cda9225bac9ad71406138_JaffaCakes118
-
Size
768KB
-
MD5
ecd48373c53cda9225bac9ad71406138
-
SHA1
2b8b28e951e733de8b57b5abe4151e0229b79ffd
-
SHA256
e85bdcdea6ee3b2cdbcb2bcf7b3edc484bba44675968a4f974860d43a8d26b82
-
SHA512
185a9727e6f3c9d2b6505657be74a17924d3dab95d6e9627588406b4b461b48db67a7d81b22cf5aa1c4f9978ec114b7278e1a768dce5c5a88725721abcfd66cf
-
SSDEEP
12288:xKE6BasVZOw9DABMpxly/3rNgely++hqqZw9vmIw39nQbgfFCrUkFyW/aEY6vyOU:xKsqDoMlwrN8ce3+6SUkECY6v6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecd48373c53cda9225bac9ad71406138_JaffaCakes118
Files
-
ecd48373c53cda9225bac9ad71406138_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.1MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE