Static task
static1
Behavioral task
behavioral1
Sample
ede5bfb7463ec8d6766602bb1a0d5267_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ede5bfb7463ec8d6766602bb1a0d5267_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ede5bfb7463ec8d6766602bb1a0d5267_JaffaCakes118
-
Size
14KB
-
MD5
ede5bfb7463ec8d6766602bb1a0d5267
-
SHA1
08d4e6c2148db33da45bfaeef1863c1894aa5aa2
-
SHA256
dd99e1bc0ec35f1786fb29f673a245fd319103abe36ffd993f89bdc57fcf69cf
-
SHA512
beea8c3c1c42e8bcf45ab72a6f622692ba0292fc9b34bba4b7d10f68a7c4b433c6c12b3375466aea5c8d801e501f2f38a265aa3cc728416b04022fcecb0b10b3
-
SSDEEP
192:FbncjiEDMnnnnNHnnalfDtGzpYCj3JAeW4SY8jA450EKc8iiFtbpTOkH3s6jRb+y:BnEimhWpzSdjBi7RNFl9Hnjl+YX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ede5bfb7463ec8d6766602bb1a0d5267_JaffaCakes118
Files
-
ede5bfb7463ec8d6766602bb1a0d5267_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NCRYSO Size: 10KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE