Static task
static1
Behavioral task
behavioral1
Sample
ebcb200aca6ed70579b7132b17f0a339_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebcb200aca6ed70579b7132b17f0a339_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ebcb200aca6ed70579b7132b17f0a339_JaffaCakes118
-
Size
97KB
-
MD5
ebcb200aca6ed70579b7132b17f0a339
-
SHA1
c5d7d1d0e1715c33a9c11095e3ebb51914f5e9fb
-
SHA256
07ee189b58b078b9bf2f1cc280e2f6d7bbe249cbd9599049a3397864b44e22bf
-
SHA512
ad1e4de27665d3a75265d4c60d250ad7feae564ce7283c0f6659f3e702647949972f57e95283c5dcc47b16e3519cb629be0724f733f6e13dc7cba1e5a00241f2
-
SSDEEP
1536:+eqkS7rUmIv6DiTvm9V9f43MqSNKJlxOwlcItyLSnKiWGBc0+6rO01r7+fWJ:fBmIv6m7mV9wMbsxOwlcTL9GBcI7+f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebcb200aca6ed70579b7132b17f0a339_JaffaCakes118
Files
-
ebcb200aca6ed70579b7132b17f0a339_JaffaCakes118.exe windows:4 windows x86 arch:x86
c60927cba59e5a07264f8bfcb83e432b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
GetCurrentThreadId
VirtualFree
ExitProcess
user32
CharNextA
Sections
.text Size: 512B - Virtual size: 206B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 235B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dsfwer Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ