Static task
static1
Behavioral task
behavioral1
Sample
ec01b5b22676a0cc9f0d0760e3bf1043_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ec01b5b22676a0cc9f0d0760e3bf1043_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ec01b5b22676a0cc9f0d0760e3bf1043_JaffaCakes118
-
Size
120KB
-
MD5
ec01b5b22676a0cc9f0d0760e3bf1043
-
SHA1
c9911090d1753130e5c504cd11d8728e606f1cce
-
SHA256
66d90b6d6af149eec37d42bab33e222a16114a938d488e1298b07dc4a90a1d48
-
SHA512
fdb171151abe6377a9264019bd7a409288e3f09bda2cbd4ad3cabf8c929c1fda377bb8c3adc3d966c0e20546a91a06113560c97cd4fb970d6d70895cb229ffc3
-
SSDEEP
3072:fYefb5m+A3Sg24xcYEsVQOhIfX5Lvu7UBUnboMDEP3jMLAeGP:fCih4xci+OhQXI7HbYbMLAei
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec01b5b22676a0cc9f0d0760e3bf1043_JaffaCakes118
Files
-
ec01b5b22676a0cc9f0d0760e3bf1043_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
flfo Size: 932B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ