Static task
static1
Behavioral task
behavioral1
Sample
645b4c3df67073a80b487a0acf43f187_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
645b4c3df67073a80b487a0acf43f187_JaffaCakes118
-
Size
1.4MB
-
MD5
645b4c3df67073a80b487a0acf43f187
-
SHA1
b42abfc7cc27372c6a0cc86a6484632e11009c35
-
SHA256
c9b01656e65d7342e23f3a54b99541aeddde293f813c1943ea941f5c9419c8bd
-
SHA512
5e360c2f86353f4876434664924b8a8418232a531538b447c72c875288a2e4bfb186217bebbfc16860a3f54dc96456c57e196ae94da2600caae2521fa2faa0c5
-
SSDEEP
24576:HYKvaX9OpXwHc6J4IzFOwjZ614W4sfnwMaU0GC8jKT7wrWIY4Xrz:H3o9Om884IRlF2fnwDUo8cIY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 645b4c3df67073a80b487a0acf43f187_JaffaCakes118
Files
-
645b4c3df67073a80b487a0acf43f187_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Kojak0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Kojak1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Kojak2 Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE