Static task
static1
Behavioral task
behavioral1
Sample
eec7d43588aa319a5d4334f56d29369a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eec7d43588aa319a5d4334f56d29369a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eec7d43588aa319a5d4334f56d29369a_JaffaCakes118
-
Size
317KB
-
MD5
eec7d43588aa319a5d4334f56d29369a
-
SHA1
346266f64d06ac0ce636529eb6336f92f9bc3bdf
-
SHA256
13fb40cb98d3e7b01d5a2bc649d27457e9a1dbfd4438139ada0e19995585e924
-
SHA512
5c660940e2fa7fe28014dde900a9b6c8c87976b98535626ed7c90a1682b09d0f0dd78a92b72e062fcff141441a6cad42572575ab00b4f49e79e4f9b2ebc98e94
-
SSDEEP
6144:bKWYbST63Shv4RITElKeopjCLU5Wc5ARaI6T8NjhBAF0pHJ7Q3lty2WIyuLDUfO:uWYbwh5U1cu0I6T8tnAFkHD2WI9EfO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eec7d43588aa319a5d4334f56d29369a_JaffaCakes118
Files
-
eec7d43588aa319a5d4334f56d29369a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 316KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE