Static task
static1
Behavioral task
behavioral1
Sample
ec1a82cad6d664ecd9a8b2f0256543b2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ec1a82cad6d664ecd9a8b2f0256543b2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ec1a82cad6d664ecd9a8b2f0256543b2_JaffaCakes118
-
Size
152KB
-
MD5
ec1a82cad6d664ecd9a8b2f0256543b2
-
SHA1
87328e06870aff562308bb066ad93929e9a72b2c
-
SHA256
8d9282bea17d68cfbb131143f01897bcbe5c14b101fc366979f2e1118c8f36e4
-
SHA512
2ec361f009f910f938c4df123ef3b4de7116f4ea886e40e94e1e0b74269154c84dc21423b32e3b439f02bab7cc7e55230f162971e5aefa539fd78735cd4c4bdb
-
SSDEEP
3072:r5E8XWCX6rUnT44f7ysMpXDjMdTaP3Qva8jww4hoLlO8TU5wTPBD93D4:r5E8XWtUnT444pXDjuazapGoLk8Y5gPI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec1a82cad6d664ecd9a8b2f0256543b2_JaffaCakes118
Files
-
ec1a82cad6d664ecd9a8b2f0256543b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 388KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 151KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE