Static task
static1
Behavioral task
behavioral1
Sample
eecc85b1cac231db851f53c2ec9eb262_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eecc85b1cac231db851f53c2ec9eb262_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eecc85b1cac231db851f53c2ec9eb262_JaffaCakes118
-
Size
133KB
-
MD5
eecc85b1cac231db851f53c2ec9eb262
-
SHA1
9f75eb5d68d15d1462e201f82f4e32c7fb07b687
-
SHA256
99fbce82759ac26b09f116ff324eadb47b384910fc96962e02ca461f372bb3c3
-
SHA512
2ab1b37de76eb44453b5b3fe4543b874fe96c5a93ac470d757655205b032dd78c33a5e9a6ec922871bbd87c938d32621bd769b1e17e96d8823e20a273b1f1ffe
-
SSDEEP
3072:IxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tA3Z/ccqcPJqn3:q2pdqfv2IPOGfXf5ovWJUKPJqn3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eecc85b1cac231db851f53c2ec9eb262_JaffaCakes118
Files
-
eecc85b1cac231db851f53c2ec9eb262_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ