Static task
static1
Behavioral task
behavioral1
Sample
ed51eb655bf89651b6d5ab1941a723ec_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed51eb655bf89651b6d5ab1941a723ec_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
ed51eb655bf89651b6d5ab1941a723ec_JaffaCakes118
-
Size
53KB
-
MD5
ed51eb655bf89651b6d5ab1941a723ec
-
SHA1
bc77d4260cabd451c488d988c4f0346ca810116b
-
SHA256
4d976a507cc86e840ff242c2ed4d8a62ab2a97b375804e43ee5d08c7a40eeaec
-
SHA512
1bab7caeddde6d1745e8ba1419e292561f9a0c79e9f18bf7814fe8e600959986143e68ee4ecdc5bad597903aead2f42e6ea0a2f1eeb9f019be87630b9297ae40
-
SSDEEP
1536:4k4XOtCd53/KCYHL3RiAfLi7aKYYf4/P:4k4XOt83/VGfLi5H4/P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed51eb655bf89651b6d5ab1941a723ec_JaffaCakes118
Files
-
ed51eb655bf89651b6d5ab1941a723ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
330ae68fd35ae99521a0ac6a1fd9b999
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
Sections
.text Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ