Static task
static1
Behavioral task
behavioral1
Sample
ecbb0c7c63b25a2b258a2b2b14a54e59_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecbb0c7c63b25a2b258a2b2b14a54e59_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ecbb0c7c63b25a2b258a2b2b14a54e59_JaffaCakes118
-
Size
942KB
-
MD5
ecbb0c7c63b25a2b258a2b2b14a54e59
-
SHA1
932f579ca04d08614dc213aaeba0afea2f7cc38e
-
SHA256
ea2b0648bf8ac12ba3388b0199a408512c99b3d665c7c0b5b2ebb0cd9bcd6c2b
-
SHA512
42473458acb1a39d8c1389a3377b2e3f10f8df6d4dd2f3a7a5dadf67cc912bb36e4961e6df9e3901709b42fd7e24f75f6e6ca39fc3b7f2196076dad3b4e524f1
-
SSDEEP
12288:Ux5gRrZtccSpGBOMe7aZ4KU2S1FzrfPNmRNBdyyoYncR7OaGdVEHbbsU8vC7WE7U:UkMM2fONr7mGY7bseCj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecbb0c7c63b25a2b258a2b2b14a54e59_JaffaCakes118
Files
-
ecbb0c7c63b25a2b258a2b2b14a54e59_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 938KB - Virtual size: 937KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ