Static task
static1
Behavioral task
behavioral1
Sample
eceb2295edca89e8cfd1a3c6389e55a0_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
eceb2295edca89e8cfd1a3c6389e55a0_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
eceb2295edca89e8cfd1a3c6389e55a0_JaffaCakes118
-
Size
286KB
-
MD5
eceb2295edca89e8cfd1a3c6389e55a0
-
SHA1
34875015432e0732cc0dd65846d41d7fb102b048
-
SHA256
647833b7823016796a53f043d3cd0ad46f2b2726993f35618b8bd8461ecdf175
-
SHA512
39c6859249420873b12e4015e9c0e53a53bd02dd324296dc10085099a7e6e3ab8c157aa810d15684648ad8f29407cdb506dc0aa4a94f270be58da5730dc8c4fe
-
SSDEEP
6144:eK4JLq9wnUouR02TdVU6MRpvg8061fX+L5xGV1MXz9k604HMKPvL07R:h4J29wnULR02hVU6QptR+VMV1MRk8RPW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eceb2295edca89e8cfd1a3c6389e55a0_JaffaCakes118
Files
-
eceb2295edca89e8cfd1a3c6389e55a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 214KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x01 Size: 24KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yP Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE