Static task
static1
Behavioral task
behavioral1
Sample
0616b5c309313db4b04b4c444b30f14f_JaffaCakes118.exe
Resource
win7-20231129-en
General
-
Target
0616b5c309313db4b04b4c444b30f14f_JaffaCakes118
-
Size
79KB
-
MD5
0616b5c309313db4b04b4c444b30f14f
-
SHA1
c0259cf5b1c5f95729f49ea9589a3a72b101717d
-
SHA256
dc1810bdc5a9aae4da012998e7a955cc8edf0f13b83569a6aaa3f8db22f3b4c7
-
SHA512
0056c0dcdbaf713065ea0f50f975a0747b09b0ddf42af48d0a05f5c3f0ae9f3496c1fa72eb7158fda809edbea800fa4f17e8f77947fc74983ae1ec7a0ba2e888
-
SSDEEP
1536:V/Bg4Ut1CAnfuGFVMrnSDmGXGxOZ1OHojvRekbK5MwM7Y33etB:vM1CgfumVMrSDBWx+UIt7bKWwM3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0616b5c309313db4b04b4c444b30f14f_JaffaCakes118
Files
-
0616b5c309313db4b04b4c444b30f14f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE