Static task
static1
Behavioral task
behavioral1
Sample
ed3256b485a7b326abac3b002451b221_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
ed3256b485a7b326abac3b002451b221_JaffaCakes118
-
Size
170KB
-
MD5
ed3256b485a7b326abac3b002451b221
-
SHA1
50cdd19a55ddf64ef0c2dd076d4aab858d364bb5
-
SHA256
37dbfa45d47f486b34e910a63db0673e86a0a3e435944e6d032c3e010d9f4833
-
SHA512
4f92861018b0d28e6c8cd1f81f473fec5c840016a0ad690bd8d364292202b4cb3dab79db43fddb56b14e5f33bac2f6111d9dd18821717d105f73d692c2bbf293
-
SSDEEP
3072:XCn5ngc/i/5WnJHQIqxs0WI/PIWperyOdl8gmY+E6InKxZgQIGj6lJ9SVLznVb2o:XCnZ5i/AlP0WI/w0yySP+E/Q6/cVLh2o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed3256b485a7b326abac3b002451b221_JaffaCakes118
Files
-
ed3256b485a7b326abac3b002451b221_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.] Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE