Static task
static1
Behavioral task
behavioral1
Sample
0eccbe71a31b72805f24ed248213b15d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0eccbe71a31b72805f24ed248213b15d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0eccbe71a31b72805f24ed248213b15d_JaffaCakes118
-
Size
315KB
-
MD5
0eccbe71a31b72805f24ed248213b15d
-
SHA1
ab35ca6c32d4f32e32a23821d3da9ddaed733b32
-
SHA256
2773442208b53ea378e258981ce4c93b4d6238b7d9efc738bdfdba1825c2cebc
-
SHA512
f4f6c2ba92597cfb855deabecbf827e9ea396f55845e2001d341bb85a951d04ece08a6d79fc5140e05538176702b30406087bc2e53073f369edc082d22c1c6fe
-
SSDEEP
6144:Hq3gCcHoqWYHtSqYnI+tnYDcMbY4FmNzNwm+MhUa1xO1BcC1cV:Hq3Az1N0nI+1Kb5KzNVNSPcnV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eccbe71a31b72805f24ed248213b15d_JaffaCakes118
Files
-
0eccbe71a31b72805f24ed248213b15d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE