Static task
static1
Behavioral task
behavioral1
Sample
895897ab22cc342f87f2d8ac63099fd1_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
895897ab22cc342f87f2d8ac63099fd1_JaffaCakes118
-
Size
707KB
-
MD5
895897ab22cc342f87f2d8ac63099fd1
-
SHA1
7c61dbd81f73c16cd37dc9f9f20f00149a5aa049
-
SHA256
a62f8bfa59e27048f0d57b7c7052aa54ec667773c1de1b697b6183355277c333
-
SHA512
a9a8a73c5bb5d5d2ebd6de189e3171d23da424f929c8156b547dc4ed148d2de6c7f8872198c8a7d6d780de9ef89758e0d5cc40d40eab637145ad7b682a6e16da
-
SSDEEP
12288:A3pzVHgopJkemMSNaNyVyreJTPnt8NIu5P/ohxzQe18OLRX3YZc6RbHn:Sz9gopFmMSNagUGTPnt8Nx5Yhx9ltsX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 895897ab22cc342f87f2d8ac63099fd1_JaffaCakes118
Files
-
895897ab22cc342f87f2d8ac63099fd1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.halej Size: 693KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE