Static task
static1
Behavioral task
behavioral1
Sample
1d8106f4e262a3d05864165bead167e9_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
1d8106f4e262a3d05864165bead167e9_JaffaCakes118
-
Size
100KB
-
MD5
1d8106f4e262a3d05864165bead167e9
-
SHA1
d018e2d1f7eda030f121359bb5b3f4bb84a81e15
-
SHA256
442688216565b95b8fa53e1db30cec3b09030824c3ed63c9f00cc2b256832697
-
SHA512
c8af9196426792bb90d01768910fc4d3ec8978a3dcc293889b4a60e8cc6ebc2fcac74fa021a35ab3d1d3937f292cbf47ec8350aa37cf2542ae163604585f18bf
-
SSDEEP
3072:rtm6BGBr+nU5tkt74R7ymx5GVk8jwaaHw7Koj4rDM7GN:rtdBGcU5tJt8i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 1d8106f4e262a3d05864165bead167e9_JaffaCakes118
Files
-
1d8106f4e262a3d05864165bead167e9_JaffaCakes118.exe windows:65535 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 188KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE