Static task
static1
Behavioral task
behavioral1
Sample
f7b95748be0dcb35fd6e9082c3e758f4_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f7b95748be0dcb35fd6e9082c3e758f4_JaffaCakes118
-
Size
1.5MB
-
MD5
f7b95748be0dcb35fd6e9082c3e758f4
-
SHA1
56056e7b42ce97cfff697bb8c912dab1d700c038
-
SHA256
8223d57e113fdab4003cbdb87d78e399ed84c4b13a65c4790a36cdddc3484b48
-
SHA512
9643c80d871208c0486635e742745399a6b9d30de33777de25e24c29da634e271c5b3bedcaf81e34888e6017afe1a40867bfee198a186a0c8b0d6329a6136f09
-
SSDEEP
24576:pfBc0H7qvHHwvb7YccVlxUioAJje9E7+j+Y/qN5FzFRd2H/zzNt7Y6mQ6QUzGjpn:pf2G79v/xSHzBJ6WC+j2bpW+6Q4GIP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f7b95748be0dcb35fd6e9082c3e758f4_JaffaCakes118
Files
-
f7b95748be0dcb35fd6e9082c3e758f4_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
P Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
P Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE