Static task
static1
Behavioral task
behavioral1
Sample
ec9dc86cbda5ad0a0b6c79654e361642_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
ec9dc86cbda5ad0a0b6c79654e361642_JaffaCakes118
-
Size
1.2MB
-
MD5
ec9dc86cbda5ad0a0b6c79654e361642
-
SHA1
9363fc43bb1f3534df3afd40812c75028f390cf5
-
SHA256
df8bf20364ce7962c466084b46a93ad6762b2459191b39d0c141d4c9c375e4da
-
SHA512
3d2014114b654a5a23bfbdcd70b3c819272ea33f3581f6b4d7b1980406cce5e4613d08795efebc0815fbdb8a6bab751020ec8713fd750f95594e31af586986d6
-
SSDEEP
12288:WGiW1r7KOT49jaOcsFYJDc9F3nC0Py3gAh7IalhBXRp5DH//rLD5FgRX8A/f0YGs:pYOT4FcsFY3blhBXdPDDgyclh1m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec9dc86cbda5ad0a0b6c79654e361642_JaffaCakes118
Files
-
ec9dc86cbda5ad0a0b6c79654e361642_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ