Static task
static1
Behavioral task
behavioral1
Sample
ec079e6e8f24aa5bf5eef3b52b4fab6d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ec079e6e8f24aa5bf5eef3b52b4fab6d_JaffaCakes118
-
Size
441KB
-
MD5
ec079e6e8f24aa5bf5eef3b52b4fab6d
-
SHA1
148a0efea65457c6f500cb7ec819801c11435b83
-
SHA256
05b189d757bdf3cdd2f4bdef14fcef5a407ae86821ca7fc0a31c54c4b1466e05
-
SHA512
ffb867c97125ef14c69a9fd4eb60e57f162414180ec1ecd50bfa830107688257196e02d7ab9be997bcc714c107d8556bb978b02486d4ab1876c0332476b1549c
-
SSDEEP
6144:LpgFUYLeV2aZDWWpsIkFKTey3zv5zh2yLbQLbxyhrKb32:SLc2ahWvIkFKPVh2yXewhG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec079e6e8f24aa5bf5eef3b52b4fab6d_JaffaCakes118
Files
-
ec079e6e8f24aa5bf5eef3b52b4fab6d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 396KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ