Static task
static1
Behavioral task
behavioral1
Sample
0f737868f2bd0d379ef1b2af3b8e7d06_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
0f737868f2bd0d379ef1b2af3b8e7d06_JaffaCakes118
-
Size
191KB
-
MD5
0f737868f2bd0d379ef1b2af3b8e7d06
-
SHA1
64bdbb9433a84f478426d688b911ed1866be6214
-
SHA256
9e646e5fd7d6d4bbe8529c6743dbaa586d87e238e373114328a72553b82c002d
-
SHA512
98185b13481c49f30b75688bb74e682a29d57f20fb5e4fcd9e70f548c9f206b523ef5fbf170c48e20f219a4cddb9d4922b069096730c54b2c6c0d6ea350a3ed9
-
SSDEEP
1536:EvQBeOGtrYSSsrc93UBIfdC67m6AJiqjt3ufT/FRxZOYCq3:EhOm2sI93UufdC67ciyt3ujFf733
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f737868f2bd0d379ef1b2af3b8e7d06_JaffaCakes118
Files
-
0f737868f2bd0d379ef1b2af3b8e7d06_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 155KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE