Static task
static1
Behavioral task
behavioral1
Sample
210bbe8068e4f1758873d6028bf544e8_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
210bbe8068e4f1758873d6028bf544e8_JaffaCakes118
-
Size
128KB
-
MD5
210bbe8068e4f1758873d6028bf544e8
-
SHA1
fd0a4fee63bc08e2430914cb330f9708c0cbab21
-
SHA256
8c21253d618df9eeb60aecf767549bdb63cf269ecdca73fdcbd170cb858fcbe8
-
SHA512
e6949c1208ccebf0494ec380ff20b5f94999fde5a52f501f1d6e874c8ddc41637be1300e3d43d82f5ca09c578d3ec0f66728807f284d8e0f3d8ec903f1a1c295
-
SSDEEP
3072:uGHi6mwMvX705RGaXeFvLhcHb3uHjrcJI:+/vw5RGaX4cHWjr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 210bbe8068e4f1758873d6028bf544e8_JaffaCakes118
Files
-
210bbe8068e4f1758873d6028bf544e8_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE