Static task
static1
Behavioral task
behavioral1
Sample
ec64f366ab9e10a8a8c9dc79c823991c_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ec64f366ab9e10a8a8c9dc79c823991c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec64f366ab9e10a8a8c9dc79c823991c_JaffaCakes118
-
Size
667KB
-
MD5
ec64f366ab9e10a8a8c9dc79c823991c
-
SHA1
8522715a309a6d5e9509a8d8f908d6b124443ba0
-
SHA256
c3008abf22d410317c895576bfd4a26663ac4a3dddd8b3319b96d58f43402e07
-
SHA512
57532f3b33479365f1a313bebe0863c671b487c9b8ecf290605de28ce55394a7db6751add5e4143041bdeec3ec986e78440a5cef456eaee90a420dc58c301e77
-
SSDEEP
12288:AQ/qahkCulerrsGpiAjFHXLs4U/vXF8XImfQzlXB0q32w77VUjTAoSC1:7/qCk7vGzF37U/vVcfUNmwlU3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ec64f366ab9e10a8a8c9dc79c823991c_JaffaCakes118
Files
-
ec64f366ab9e10a8a8c9dc79c823991c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 664KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ