Static task
static1
Behavioral task
behavioral1
Sample
ece495ad4fe15c065151ebb1eb9523c5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ece495ad4fe15c065151ebb1eb9523c5_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
ece495ad4fe15c065151ebb1eb9523c5_JaffaCakes118
-
Size
98KB
-
MD5
ece495ad4fe15c065151ebb1eb9523c5
-
SHA1
606fbb110f3c60246b689203cd7a688d4b4e42a3
-
SHA256
db2f328dc50c119bb55379de92355879b20d0f638b665a3bad31c56c97ae3a39
-
SHA512
8dd2538b289bada128132ffa675652e0b3157a04784135339786fc06c525399fcdbb7e83504d6057dde8f6b4c48813682c1ecc2e16120caea3fbbb7324c2659a
-
SSDEEP
1536:+a0T02RuwDiQwMs9spUYrBlAalAO53mCQEOMjRhTiiVT3l88DV5XjdUP:+a0TpuwDkMs9spUOrAat3mCQKddfp5qP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ece495ad4fe15c065151ebb1eb9523c5_JaffaCakes118
Files
-
ece495ad4fe15c065151ebb1eb9523c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
5 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
a Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nqxcrfrc Size: 493B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE