Static task
static1
Behavioral task
behavioral1
Sample
ecd3a1691f99019099464f16aedd3450_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
ecd3a1691f99019099464f16aedd3450_JaffaCakes118
-
Size
1.1MB
-
MD5
ecd3a1691f99019099464f16aedd3450
-
SHA1
fdbb6826fe7c0b3c32c98555b2eb24d34813e426
-
SHA256
062cdbabae2212a0c5ef196657376671b6f3ed37b8dcc11c2bbdd7d0f1a54cd7
-
SHA512
955d88393118bf9e165881688f53e4d6ad7132f5d782a4348f33bc4fe0c22a9aa318f1d6fbcc199d2aaa7af192800a9a7b41a94ce30b67e7cadb0e1f3eb3f9c2
-
SSDEEP
12288:oSOQE8WzzZ9wWP0vb1VA5ISxYBp4L2OGW5AzUd7jjBFddk4A4tV/P3Bc3Rh0IqxI:0Ag5n5dXfB4/h76d0pbnv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecd3a1691f99019099464f16aedd3450_JaffaCakes118
Files
-
ecd3a1691f99019099464f16aedd3450_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ