Static task
static1
Behavioral task
behavioral1
Sample
ecfe933861aa8949be93d7e5d0176816_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecfe933861aa8949be93d7e5d0176816_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ecfe933861aa8949be93d7e5d0176816_JaffaCakes118
-
Size
181KB
-
MD5
ecfe933861aa8949be93d7e5d0176816
-
SHA1
7010955febc520f4d464c909dd794b1d2dfe6132
-
SHA256
3dffb2d857bf7875e3735771037d8e93a5c049f79ace849e3626ff471663f671
-
SHA512
c2eff9f4982acd4f5f9829c1afca2ad7950b09c0d4c19c143bfab035b7ae71b2e0f2c3c53b3af6ae6ff628167b3d07cb0fb22e41ca491c147ad9bd32d058f996
-
SSDEEP
3072:HzE5KV6VgCxMdAke5pDjBld4Pef77w1kHyD4xvklJmjRTU/R6ktwCg:T/V6emHyY77skHXxvgJC6g4Lg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecfe933861aa8949be93d7e5d0176816_JaffaCakes118
Files
-
ecfe933861aa8949be93d7e5d0176816_JaffaCakes118.exe windows:4 windows x86 arch:x86
b797c04283a04239c0ed8fb8473b3e16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ValidateLCType
SetConsoleMode
GetStringTypeExA
SetConsoleIcon
GetConsoleCursorInfo
GetConsoleInputExeNameW
GetFileAttributesA
GetSystemDefaultLCID
GetPrivateProfileSectionNamesW
GetUserDefaultLCID
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 157KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE