Static task
static1
Behavioral task
behavioral1
Sample
0ec7fb0eb52e0e5f843fe401c18048e9_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
0ec7fb0eb52e0e5f843fe401c18048e9_JaffaCakes118
-
Size
2.6MB
-
MD5
0ec7fb0eb52e0e5f843fe401c18048e9
-
SHA1
6feede6dd169bcde9fe2e46886fa8a41ff3e6d77
-
SHA256
17088181109386d956464f0af8cfafe4e83230c5cc88a1463865d0cec82d8637
-
SHA512
694d66d1cf4ea448d3c4598c9135a90571eef773b895e5de93221784dfc541d54fa854e27bc701eeafd65d9d958445789d3bc504a6e7b8f6f3820f51e7a4afb5
-
SSDEEP
49152:aG0BLIQCwS5rjBa+oAfMnbSyJBJSzdUNVaDPwe:aBLVujBa+0xBJwdUNVaDz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ec7fb0eb52e0e5f843fe401c18048e9_JaffaCakes118
Files
-
0ec7fb0eb52e0e5f843fe401c18048e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
services Size: 2.5MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE