Static task
static1
Behavioral task
behavioral1
Sample
299f2340cbaf005bf1e77d988da0a73b_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
299f2340cbaf005bf1e77d988da0a73b_JaffaCakes118
-
Size
77KB
-
MD5
299f2340cbaf005bf1e77d988da0a73b
-
SHA1
efa1ac7e038035c3f67b7dea8efe0aeebcc4336c
-
SHA256
a6d95b312f1694f04587d5ae8a04a92ad8249cc642b0669cc583a0d6ad6d0811
-
SHA512
b2dfd1ff7c5b59e9f8161dac027799ca977054ea69c85b2b5b5279c177c6d15afab099befe18722a5a2fce99d3becbd89c85010e631bf52571f8b3fdd0eaeb67
-
SSDEEP
1536:iheXMHpY94aeHn1lRMDgw/Y5pl15Kvwo73+j:inYWaeHn1lRMDlUH5Kgj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 299f2340cbaf005bf1e77d988da0a73b_JaffaCakes118
Files
-
299f2340cbaf005bf1e77d988da0a73b_JaffaCakes118.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
holaaaaa Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
fuc�kkkk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hahahaha Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�ejooooo Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE