Static task
static1
Behavioral task
behavioral1
Sample
04b5ed7ab328e9ad737a184266c39db8_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
04b5ed7ab328e9ad737a184266c39db8_JaffaCakes118
-
Size
57KB
-
MD5
04b5ed7ab328e9ad737a184266c39db8
-
SHA1
9f6a206fedd11c654aa99b1f0ebcd275f75a9859
-
SHA256
ea4d9a7c4fed0968d1385242c1182360a9a61c1aaf0355b83c1f3178cbde1cc7
-
SHA512
5ff4d9616025a63fd2530ba3992e04d16e2e476ce10f1d82017dde248db85cb7f3c08c2828f5376a9da31e5ebefe9051526fcc6dfe1ed47f1089199c450e9050
-
SSDEEP
1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIJLeT:ymb3NkkiQ3mdBjFIoT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 04b5ed7ab328e9ad737a184266c39db8_JaffaCakes118
Files
-
04b5ed7ab328e9ad737a184266c39db8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ