Static task
static1
Behavioral task
behavioral1
Sample
0f70f732baab4138a52ce9930e2a4e29_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
0f70f732baab4138a52ce9930e2a4e29_JaffaCakes118
-
Size
296KB
-
MD5
0f70f732baab4138a52ce9930e2a4e29
-
SHA1
74620abd12a826fe1e33d0997eec1b61f1bc4284
-
SHA256
ac0534d58580773ddfbdd3b87c318ebae4357ebfb5fa2ef108c3a3c5c0985a7f
-
SHA512
bc9f91c2e83d0a373385f826e03a3041b8c0c5ce13b96325f11a0e8376d38f6e7d9e538e3c8a3f11366e3b89ad942d8299a5619208c54364bd5eb75cde62f4e3
-
SSDEEP
6144:mLQ0KYnF2S4H1Lpz9oH+jwEoccwZ00c2w7vyJyXurYcdJF2sq:C/FinjwscUDwTsrY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f70f732baab4138a52ce9930e2a4e29_JaffaCakes118
Files
-
0f70f732baab4138a52ce9930e2a4e29_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 449KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.delete Size: 512B - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklstb Size: 280KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo2 Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ