Static task
static1
Behavioral task
behavioral1
Sample
eccec7abf3eb4d833b569a8d73c2fe7e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eccec7abf3eb4d833b569a8d73c2fe7e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
eccec7abf3eb4d833b569a8d73c2fe7e_JaffaCakes118
-
Size
3.0MB
-
MD5
eccec7abf3eb4d833b569a8d73c2fe7e
-
SHA1
8d7423a35baeb96ce9bcc1b857f115a2b1fa55df
-
SHA256
6ad9391c17c1f7c824ef19276faa0f6b1cd904f3e0cfc0b827985fd9c0ac2a73
-
SHA512
7fa3a123e3606f23b3a21b9eff9c7880a10049b988f6ea11a41cf838ac0bc732a9d6662f25c4941bc5daed586b43e2ad63b4b84d22d2dc97d4ca7ef3387ce826
-
SSDEEP
49152:ayI4jZtInWnndbFsMvKFJ0yJdSRmwQRv1e9dVysR:al+9b+MkJ0NRZZdfR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eccec7abf3eb4d833b569a8d73c2fe7e_JaffaCakes118
Files
-
eccec7abf3eb4d833b569a8d73c2fe7e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.willian Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE