Static task
static1
Behavioral task
behavioral1
Sample
2327e38804e3aa2bdbf57f9456cc7a57_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
2327e38804e3aa2bdbf57f9456cc7a57_JaffaCakes118
-
Size
381KB
-
MD5
2327e38804e3aa2bdbf57f9456cc7a57
-
SHA1
6cf0b068525da4c05f57b597c142e6abe4e4cc9a
-
SHA256
c94a6cc0aaa546754dec619724a3f6c26997d634adfb710d1ab7fe144abe3b2b
-
SHA512
d880990c14e3b24856142b29e5e8a4b3320d63b1c3c8007766337bb92d8539ec153cc07b32d0db8b110e2a085718dde62bd380cac305373e00a858f96193c48f
-
SSDEEP
6144:z/JctWdMgLYYCdUFt1+VOdnFUdVJ/aSyEx/RSDJFAj4Hc769/cJBproFnxAwm4li:zKtgnHFG8GdVZaSyEFcDJHc769kJB2/w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2327e38804e3aa2bdbf57f9456cc7a57_JaffaCakes118
Files
-
2327e38804e3aa2bdbf57f9456cc7a57_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 134KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 46KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xtomitd Size: 76KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE