Static task
static1
Behavioral task
behavioral1
Sample
ecd7365422db60cf4f55f3c6f4ed49bf_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
ecd7365422db60cf4f55f3c6f4ed49bf_JaffaCakes118
-
Size
973KB
-
MD5
ecd7365422db60cf4f55f3c6f4ed49bf
-
SHA1
e4b914e366e854fc076b0faa955d4f52ae6f840d
-
SHA256
77041a33e4f52b86a78b12d80a21e48ba25e4d4c430090f33ba69a08f12a83a7
-
SHA512
a6a3b539765c31957564ee166dd8f2539ff4cfb73e76eda3cae1120f15abea410cc735bd8b0e759d69971ed788e58191b8d1c6f18081236aa7a431c8f88b0a24
-
SSDEEP
24576:UvEEKKedD+iC1ZE3vx/cR/Iqc73+SK+ukOd:+UK2D+DQgI3c3F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecd7365422db60cf4f55f3c6f4ed49bf_JaffaCakes118
Files
-
ecd7365422db60cf4f55f3c6f4ed49bf_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 818KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 154KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE