Static task
static1
Behavioral task
behavioral1
Sample
ec8d7174d7903f33b4ef30cc94864651_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ec8d7174d7903f33b4ef30cc94864651_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ec8d7174d7903f33b4ef30cc94864651_JaffaCakes118
-
Size
938KB
-
MD5
ec8d7174d7903f33b4ef30cc94864651
-
SHA1
022890717bdbbf46289f4a28ab614a4941083111
-
SHA256
6acc19951dbf6135e0e1e4887f0cfd05ba25be970c2441e3a6be49d60dfc1f47
-
SHA512
296e840f30366dbd4c499cec05e5391b087659482a2557b1fc2eb71caf3dee5d05bdd28df9a5586f243e28724fc9d034ab1898cbaab45d719dc1c87be3cea0a9
-
SSDEEP
24576:qyB5sjP6+kiZsCH1FlViWhlLA4Eopy+Cv0MIixDOkwS6qWznqqr:upsAFlkWgJopyDJIi8xS3Wz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec8d7174d7903f33b4ef30cc94864651_JaffaCakes118
Files
-
ec8d7174d7903f33b4ef30cc94864651_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 852KB - Virtual size: 852KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ