Static task
static1
Behavioral task
behavioral1
Sample
ecfc06aeffa7b94f8f41b4ace8f7bcd1_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
ecfc06aeffa7b94f8f41b4ace8f7bcd1_JaffaCakes118
-
Size
334KB
-
MD5
ecfc06aeffa7b94f8f41b4ace8f7bcd1
-
SHA1
a3e7907df35529e600ef5ee66af3788b10769d95
-
SHA256
eef39efb8d95389b021725e983e1778feed9d86f026352f4a3d7effb3f9ddab9
-
SHA512
eaaa53f3d660218073f1c090c33bb9794477576aa469c42855acec61aea8c27163e44be31dbef957ab689bd2306481d3a19c66aafc4e5553f8546024ee3c688b
-
SSDEEP
3072:6zQgBOSOm06uNDTnFIcqvPwl+n0lLPjpymmQfRZ8XVMHluaqLIQHRhxsllD7g5ZM:6hduBTnFoYl+0ZPjpyb+Ya3gmyx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ecfc06aeffa7b94f8f41b4ace8f7bcd1_JaffaCakes118
Files
-
ecfc06aeffa7b94f8f41b4ace8f7bcd1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 255KB - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.yip Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ