Static task
static1
Behavioral task
behavioral1
Sample
0ecded36a30cdbcd45c8cffbffbedf80_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ecded36a30cdbcd45c8cffbffbedf80_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0ecded36a30cdbcd45c8cffbffbedf80_JaffaCakes118
-
Size
25KB
-
MD5
0ecded36a30cdbcd45c8cffbffbedf80
-
SHA1
dc6889bac333b8b48d02e171797fd923902346c0
-
SHA256
b6b1e60107d2c14d44570fcf49cb8355a482a41e7519cce0f110cb5d1dd447da
-
SHA512
2c2a5ac04d27200453dcc326430c23d84b20711583cab18ce8b3c23b851ba8b9973ccdcf2c83a7970e6b6a2ed149a4e643f0a00048becd54bc42dd9e7d50a05b
-
SSDEEP
384:RmtFjNrjmHb9zawDmvGDNyjPl5/JcpTXQaWMog8YvpF/QyW2xWqVRN+BtU2:o59j2ZzbDmvG2JcVQFgZ3LRNQtF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ecded36a30cdbcd45c8cffbffbedf80_JaffaCakes118
Files
-
0ecded36a30cdbcd45c8cffbffbedf80_JaffaCakes118.exe windows:5 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE