Static task
static1
Behavioral task
behavioral1
Sample
4abb6671d448d0bdf7752f4d990a0dc8_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
4abb6671d448d0bdf7752f4d990a0dc8_JaffaCakes118
-
Size
1.2MB
-
MD5
4abb6671d448d0bdf7752f4d990a0dc8
-
SHA1
ec93de5a9a1d6d53d46f770638c591895659f481
-
SHA256
d8791b49f2423577f31534a4cfeb6fbaa5bb2efde5f981a903c9221216bbdba4
-
SHA512
4f4150f5e17809bd2216ab9ea89d97130f0d2da39055e54470393f7a9772f3fc50fbd8f984964caeadd6bcdb186c8da28b1fda6cd8e1edf97ed773c83279568a
-
SSDEEP
12288:3j/GPyEzMUDDGPXXMqBic6mPoYmCPlbrM6guYT4Mo4yg+E2Po2XkfiFMxJowMR/c:T/b8GPXXMrmflMKax2y6lXklxIeMc1UY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 4abb6671d448d0bdf7752f4d990a0dc8_JaffaCakes118
Files
-
4abb6671d448d0bdf7752f4d990a0dc8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 771KB - Virtual size: 772KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ