Static task
static1
Behavioral task
behavioral1
Sample
6823446575259753736886975965041853397966791866351969758355871156607314985293129427412447934361131985.exe
Resource
win7-20240221-en
General
-
Target
aa8857d0ba54f7b4e5c2fb504982dce7_JaffaCakes118
-
Size
282KB
-
MD5
aa8857d0ba54f7b4e5c2fb504982dce7
-
SHA1
f8c8721da281b38b840990c2f889b5b4df37b3f3
-
SHA256
72fccc6c2dc000ba8b26ce900b1fffe7aa2db978c38c6084c16aeddeb0220ee1
-
SHA512
bfd80a92d0f4e7452b7b424d0d3d9c5aefbf6332ab7dcb9fc44af4e810c926044fdfef14034decc61117368f59f48f8fede81420206f56e643cca657cd4e193a
-
SSDEEP
6144:4wwfyCEtnExE0UU5Gp+5Z77YhvIrSCSmv5CbxH+YXuRPvA3Avw5w:bwfSGE0UU5sE8IrSChCbxHHXuRP+hy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/68234465752597537368869759650418533979667918663519697583558711566073149852931294274124479343611319855032447576013648097242505659.exe
Files
-
aa8857d0ba54f7b4e5c2fb504982dce7_JaffaCakes118.rar
-
68234465752597537368869759650418533979667918663519697583558711566073149852931294274124479343611319855032447576013648097242505659.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
IMAGE_FILE_UP_SYSTEM_ONLY
Sections
Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 484KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 484KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ