Static task
static1
Behavioral task
behavioral1
Sample
ec0faf754ddb8a74e1d8c3b7bf1e8c10_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ec0faf754ddb8a74e1d8c3b7bf1e8c10_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ec0faf754ddb8a74e1d8c3b7bf1e8c10_JaffaCakes118
-
Size
84KB
-
MD5
ec0faf754ddb8a74e1d8c3b7bf1e8c10
-
SHA1
614357dc546d95c6b201948495898c8dbd1dfece
-
SHA256
20b5132b933fd9fe2cb08cfd0fbab8b1c8254468701016405b1ea0ff5a6c961f
-
SHA512
527ea888130a5c23fe26869140f46c9d4c4f6298a1490f007824cfc5b432d0c6c0cc8cec237655b67b73eeee6f27b327492437d0e20df131c6b6f4dad92ef851
-
SSDEEP
1536:QViXSHNdP0O0K6t9laAGclKen/jFnToIfHTRzr5J1DAZumFp0zA+V/R8xJ2:QV2UP10K6tien/jtTBfHTRzr5JtAZumq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec0faf754ddb8a74e1d8c3b7bf1e8c10_JaffaCakes118
Files
-
ec0faf754ddb8a74e1d8c3b7bf1e8c10_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_WRITE
Size: 73KB - Virtual size: 76KB
IMAGE_SCN_MEM_WRITE
Size: 267B - Virtual size: 267B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE