Static task
static1
Behavioral task
behavioral1
Sample
ecee012f364c49eb1d103bb5f0d43d3b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecee012f364c49eb1d103bb5f0d43d3b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ecee012f364c49eb1d103bb5f0d43d3b_JaffaCakes118
-
Size
136KB
-
MD5
ecee012f364c49eb1d103bb5f0d43d3b
-
SHA1
c800894f37036cd4b88722c2711b4065d9b37825
-
SHA256
a61d068e31d515b628737a697cda3f11f255619a71ce599a3f3193be808647bc
-
SHA512
a3474cbc8525682836639ba5e0d6d6569f4603c18ad8e1176b8a86aef7142ac917f8ae3c049c6fa17ba2ec8a5787c8c6d2577c4a7cf5d6ac066a1c41acee8333
-
SSDEEP
3072:yzRmmK6Grg6aXhjz0KPlCXzakiLU6JCnO6Sb1nqJKF:yzoN6GihEclzkLsCnO6SRnqJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecee012f364c49eb1d103bb5f0d43d3b_JaffaCakes118
Files
-
ecee012f364c49eb1d103bb5f0d43d3b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
� ���a�� Size: - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�m�����R Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE