Static task
static1
Behavioral task
behavioral1
Sample
f94f2a1c83b883663a8d5663605ac996_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f94f2a1c83b883663a8d5663605ac996_JaffaCakes118
-
Size
894KB
-
MD5
f94f2a1c83b883663a8d5663605ac996
-
SHA1
2aedfd8d0dccd598ed631ca98943e6a931adbc13
-
SHA256
0e4751fa8b9f315979270d73b1311a84404ca6b57f9477500953678b2b84cfa0
-
SHA512
da6742610ab15f8e2361dabf024ff034e1de3e4a6d54ebd2406736b1c2c7ae47e584e472f91e9ba1594501d50cc2767901fa2b45d71267f6ef818001ff56a60e
-
SSDEEP
24576:kxF40pkW1j5LyylNoJSpCi4p96MuVGfoNJox0d:yF4s1joeoJSciMj3AjoQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f94f2a1c83b883663a8d5663605ac996_JaffaCakes118
Files
-
f94f2a1c83b883663a8d5663605ac996_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 12KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 501KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 440B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ