Static task
static1
Behavioral task
behavioral1
Sample
ec1b0b69ef6fdef2dded2ba7c68dcc33_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec1b0b69ef6fdef2dded2ba7c68dcc33_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec1b0b69ef6fdef2dded2ba7c68dcc33_JaffaCakes118
-
Size
137KB
-
MD5
ec1b0b69ef6fdef2dded2ba7c68dcc33
-
SHA1
7c95d56d0f4f8b679b4e7991df722e96f5af4c7a
-
SHA256
ab8ebe25536c38d8ab48197b15f8037c88fc4bb6dfea2fb5567f86641731fc1c
-
SHA512
8f392484655833246817f1d48c1b9e6c4db4c7ecea6f038d86af639c184add0829957f454d7427146e7875a1bab58c442210b4244f94e357294181f5ff19a321
-
SSDEEP
3072:iDq89F2mKMXIu1nrt3R/DmqIt7D+EsVS1duYnVG63F5:qq8jlFIMB/C3+FVkduYnVnz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec1b0b69ef6fdef2dded2ba7c68dcc33_JaffaCakes118
Files
-
ec1b0b69ef6fdef2dded2ba7c68dcc33_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 136KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE