Static task
static1
Behavioral task
behavioral1
Sample
ecf609b91a490bee9cc695be40a0d063_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecf609b91a490bee9cc695be40a0d063_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ecf609b91a490bee9cc695be40a0d063_JaffaCakes118
-
Size
471KB
-
MD5
ecf609b91a490bee9cc695be40a0d063
-
SHA1
0d9002b3badbdb57821f227051fd9bafb9e0dc06
-
SHA256
82eac43b16388dcb289c43aefd13cb7891a4690e890346bd9b37dc3aedce75f7
-
SHA512
fbbd6439e3422f3b0a2199de21304678694e74784c6b88c1ffdce97a80a8e61ab8294362502898a3a6aadae1ba13f0d806a10530090b32eb90ed647b185cfe7c
-
SSDEEP
12288:YbcgJNP28s+pD7hQ9DJ+y8Qr96wTd9kCEkm+BqhJl0h:8PPcmD7a9DcwjkCJBqhJc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecf609b91a490bee9cc695be40a0d063_JaffaCakes118
Files
-
ecf609b91a490bee9cc695be40a0d063_JaffaCakes118.exe windows:4 windows x86 arch:x86
f35da0feaeb1ea3121dbe4b43d43d5fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExA
kernel32.dll.
LoadLibraryA
Sleep
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 469KB - Virtual size: 469KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE