Static task
static1
Behavioral task
behavioral1
Sample
3669aa072fc082c1b16bfdbe698044a4_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
3669aa072fc082c1b16bfdbe698044a4_JaffaCakes118
-
Size
129KB
-
MD5
3669aa072fc082c1b16bfdbe698044a4
-
SHA1
177f04842ebde3cdcde664e42b3f0d397c2cad15
-
SHA256
988aca3a24f4bfee88a1501b3dfff9c66ed0c41149d8f4d0ad0d5787d32cb689
-
SHA512
21ab63747d627d9423a6b196f721620d6f4f79dd0a2eae7ff42e58913c931148b68b2f75fe549487ba030ce474ec6eb42deed9aaf84f80db4e82eec953fa180d
-
SSDEEP
1536:UUBiFqtXmPmgC9qcRL5eqMlO6CQ19KzpjEXqQqzvlrpH2DdgZJt7n3JGHjYVXg3c:UOn16mg2qwwbO6Bmz9QKtOGGDKg3Kx+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3669aa072fc082c1b16bfdbe698044a4_JaffaCakes118
Files
-
3669aa072fc082c1b16bfdbe698044a4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE