Static task
static1
Behavioral task
behavioral1
Sample
ecc031a0894f8cb27deacd0e9f2eeed1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ecc031a0894f8cb27deacd0e9f2eeed1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
ecc031a0894f8cb27deacd0e9f2eeed1_JaffaCakes118
-
Size
123KB
-
MD5
ecc031a0894f8cb27deacd0e9f2eeed1
-
SHA1
18ed2f118f9f8663aade0aa0ac27fd38bd9e0610
-
SHA256
af361dbdf2d52575c1d9bce62804443d5bf7db8ba9f6b0c7d36036965285fa97
-
SHA512
730851f280e05ddfaf222f91c14894bfeca0f2d645d45c03093e7525ae9525c3ca1732c19ded8838b1290afa6faf479798d8f7fbc75cba4f0ab1149a18fcd89f
-
SSDEEP
1536:oKYWh12cvUDiCeTpKNflAooEesMw2xxLAuEqn/GRt2:oKYaQc8DKTYJlAo3UwOxLAuNn/GRc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecc031a0894f8cb27deacd0e9f2eeed1_JaffaCakes118
Files
-
ecc031a0894f8cb27deacd0e9f2eeed1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 58KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iiwn Size: 60KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE