Static task
static1
Behavioral task
behavioral1
Sample
0eccfdddcc3822c366136efc5e9c9fe9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0eccfdddcc3822c366136efc5e9c9fe9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0eccfdddcc3822c366136efc5e9c9fe9_JaffaCakes118
-
Size
498KB
-
MD5
0eccfdddcc3822c366136efc5e9c9fe9
-
SHA1
04f8a069b3b2fd07510177b9cf4ad4af57805a64
-
SHA256
dcdaf75b9312c2f81f401123fd95eda1d71721a15fa6af30a769e0fac4d79177
-
SHA512
828d8f97293d4badf9f1710dc00ee1b441a55b994c5ac7d76b560eb35fbadb882fbef8c76c6975df553ca82d99fcb51bb6412d4359fd17721798111c0504b571
-
SSDEEP
12288:Z35BJcFIKCW7R8IyDcgZQma1YelLods59gmZ+bZ:D3cFI+7BOfa1nlLokqZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eccfdddcc3822c366136efc5e9c9fe9_JaffaCakes118
Files
-
0eccfdddcc3822c366136efc5e9c9fe9_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.naked1 Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.naked2 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ