Static task
static1
Behavioral task
behavioral1
Sample
ed6c0cdbba6268788555235f3c2da911_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed6c0cdbba6268788555235f3c2da911_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed6c0cdbba6268788555235f3c2da911_JaffaCakes118
-
Size
638KB
-
MD5
ed6c0cdbba6268788555235f3c2da911
-
SHA1
9922c6ac86078b5cf4507691d9d00a3d3d7a7e16
-
SHA256
ed5f585d13e8537e51267311ff022620bf8acbe8554fcd30b75301fef6a33565
-
SHA512
2c9eb0e92cf5a106d941d6bb108f00461585929247186d07d94a802fd89564e92267e6bb17b627bfbc4dae4c483b31b8599c328cc9fed64a3e9fb6da309e098f
-
SSDEEP
6144:UZfec9EbXDk6Rk8KME2Ernmy+g4IE2Ernmy+g4yuHObE2Ernmy+g4IE2Ernmy+g1:UZWtI6RkJrarGO2rar2dA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed6c0cdbba6268788555235f3c2da911_JaffaCakes118
Files
-
ed6c0cdbba6268788555235f3c2da911_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ