Static task
static1
Behavioral task
behavioral1
Sample
264c65c27862b3a7a6dddcbbd5719a96_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
264c65c27862b3a7a6dddcbbd5719a96_JaffaCakes118
-
Size
99KB
-
MD5
264c65c27862b3a7a6dddcbbd5719a96
-
SHA1
da9276e92f437c799825f67d62669da453b8e6a3
-
SHA256
22b2d7fa5ff6b42f51c1725840b8f95377be353b0ae30132e42681f8331a5cc3
-
SHA512
e020f9838c011dadff143f68ba6ba9af727ff2639afe90a6afcc1260600c1d0da32674d3385dba3cb11b9c6acd7da81d0c328b8586813068d134b4d4de1b8daf
-
SSDEEP
3072:0vdzAg7oLyxAphCCwmeiPb52m1vRCvDu:0vdcg7oLyVCweT52A0Du
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 264c65c27862b3a7a6dddcbbd5719a96_JaffaCakes118
Files
-
264c65c27862b3a7a6dddcbbd5719a96_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
XagCDtlc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XagCDtlc Size: 188B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XagCDtlc Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XagCDtlc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XagCDtlc Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XagCDtlc Size: 19B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
XagCDtlc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
XagCDtlc Size: 64B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
XagCDtlc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE