Static task
static1
Behavioral task
behavioral1
Sample
0f158a37b05f5ea4e46eb8ec240347f6_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
0f158a37b05f5ea4e46eb8ec240347f6_JaffaCakes118
-
Size
298KB
-
MD5
0f158a37b05f5ea4e46eb8ec240347f6
-
SHA1
175c1d2f7f6767f6d9e9757736f4fe4d9b54f03e
-
SHA256
af879924e90330f6d1e5cca420fda50b9efa6d6da3435f32bddde55d704e7c22
-
SHA512
5d1b6aadb207664a1b52c1b98d34a6ff2de3057f2ab40ec5944cb65bb9564e58107f8e0cb09277567d57ee0ebbff035817a0f9af82f70c96aedf3c9e2da4f1ee
-
SSDEEP
6144:jK33pv7i/qJOxUGmBCHLgpTQdnkerNW/uprjMTldBR:j2uykx2QrgpTaklWp8hR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f158a37b05f5ea4e46eb8ec240347f6_JaffaCakes118
Files
-
0f158a37b05f5ea4e46eb8ec240347f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 281KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ