Static task
static1
Behavioral task
behavioral1
Sample
01764e441b24a5b80ef56db183c35132_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
01764e441b24a5b80ef56db183c35132_JaffaCakes118
-
Size
221KB
-
MD5
01764e441b24a5b80ef56db183c35132
-
SHA1
966b1f0d331ccab4efed5732862089edd423ab1b
-
SHA256
3983ecb4da4f25f9586a91a491832877bc20404099174ef2e573dcfa69d2d556
-
SHA512
c61bcbd39153ea965f19a2fa8b5f652c29ab3d213917a2913f896445242263bbd00967bfa63ff9f197d063435b5ce3844c60f64090a7985e76bf489c346464d4
-
SSDEEP
3072:EhOm2sI93UufdC67ciyt3ujFf7TQsq5VaQfENDDNudK:Ecm7ImGddXyt38TU58DDNus
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01764e441b24a5b80ef56db183c35132_JaffaCakes118
Files
-
01764e441b24a5b80ef56db183c35132_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 155KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE