Static task
static1
Behavioral task
behavioral1
Sample
ec1c888c32f1e93094cbbe5708084f99_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ec1c888c32f1e93094cbbe5708084f99_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ec1c888c32f1e93094cbbe5708084f99_JaffaCakes118
-
Size
1.6MB
-
MD5
ec1c888c32f1e93094cbbe5708084f99
-
SHA1
c163c7bdc106888457d866c983b27cae52cdfd80
-
SHA256
441631f0d2f1d63c04f49b964e48903becff5ea21415b4b13fdf0772661428a0
-
SHA512
7047a073ba2d533d00b1b7655c5363c32fa215ed9385a4b46053f5d1eb7a68ea1af7b4c3a8e551a3566383731016ad16c66f804748953102cf85ef0df7d90bf7
-
SSDEEP
49152:4ZfE1/wDGCxsnMd2XQR3uyysw3XIht4y:4Zs14CCxsnuAmLysw3XIT4y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec1c888c32f1e93094cbbe5708084f99_JaffaCakes118
Files
-
ec1c888c32f1e93094cbbe5708084f99_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
48�{�̇� Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�ޅ<�ʵ Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE