Static task
static1
Behavioral task
behavioral1
Sample
1633a0e7385fa7224874e9ab86974ec9_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
1633a0e7385fa7224874e9ab86974ec9_JaffaCakes118
-
Size
122KB
-
MD5
1633a0e7385fa7224874e9ab86974ec9
-
SHA1
3e70d155ddceb5b5aa39f0454eea3ca302a90294
-
SHA256
c8211d59d38173f4b62d18f9a7fd26d41e0ec6e64187ac7c19fc3b0ebdc7186c
-
SHA512
01e30ecb1e7ea983825dbfd989a13bf78fdc17457f8c3c5c8db4652d41f3c224128ae426d10429a8746d4823d19ca5654d64831c134db7675377f172d990790e
-
SSDEEP
3072:u8ndof9jSeOWguuIXt8ypfdwf7scVap0JTJK5:vSjSeOWguuIXtFM7scVhTJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1633a0e7385fa7224874e9ab86974ec9_JaffaCakes118
Files
-
1633a0e7385fa7224874e9ab86974ec9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.JPG Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.JPG Size: 188B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.JPG Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.JPG Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.JPG Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.JPG Size: 19B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.JPG Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.JPG Size: 64B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.JPG Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE