Static task
static1
Behavioral task
behavioral1
Sample
ec81dda684ce59902c7255215cf35b6a_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
ec81dda684ce59902c7255215cf35b6a_JaffaCakes118
-
Size
121KB
-
MD5
ec81dda684ce59902c7255215cf35b6a
-
SHA1
0b1f2a9e570912f85ec81f644f6ed2b3cbf92da8
-
SHA256
ce028b8cf09cc08698cfdb99a47497d8facde68a68255a37c8c5475b3c452805
-
SHA512
3bf097d90df10d0e3478d8c6c353e7bf59b16bdbad16d87a753d17eadd09babdb0ac1385f64ea01eb6cf75e499d55bbb3e6ae8f620b56de4d2259e96b0e8ecfe
-
SSDEEP
3072:iFWYjr2zuist200qbd+ClClaPWjomoXecSKMCYR6:F+ast20dbRUFj3cecSsYR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec81dda684ce59902c7255215cf35b6a_JaffaCakes118
Files
-
ec81dda684ce59902c7255215cf35b6a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE