Static task
static1
Behavioral task
behavioral1
Sample
31d29850dd9043af8c03a64730a81a99_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
31d29850dd9043af8c03a64730a81a99_JaffaCakes118
-
Size
424KB
-
MD5
31d29850dd9043af8c03a64730a81a99
-
SHA1
c6ef5766240013a993080bf343d885a7d91b2e6f
-
SHA256
2ee352dbfbedf82aac26a48f4d43378471d3eb915641fda68e69e33d8c7c9989
-
SHA512
16ec5bae5bf17394b9c0fccf567c2da2bd3c5dcea42392d9b39abc21dcd0c9ef5808b76f2846c8f30b5b99c45d7270535cb6cd9fd18dd2d7e8b943b90ac92ef4
-
SSDEEP
1536:hXkNJ2WnJuQxIjsIXTNeOrHqAPkejyfi:hYJpxY8OrH3kD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31d29850dd9043af8c03a64730a81a99_JaffaCakes118
Files
-
31d29850dd9043af8c03a64730a81a99_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
��R��Q� Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
G�P���y Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE