Static task
static1
Behavioral task
behavioral1
Sample
389ee9cb77ae863e21bd609193bdebc9_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
389ee9cb77ae863e21bd609193bdebc9_JaffaCakes118
-
Size
351KB
-
MD5
389ee9cb77ae863e21bd609193bdebc9
-
SHA1
b2cc8b0a39d55ba4a2d57527a9ad47c432ce2a3b
-
SHA256
1b8c2cbcbc0f98ed92ed1415e41b127eb567afccf9ecd578ec7b97c90721a60a
-
SHA512
8318d1fec18b9c98dde05915f7d1ee980149a0659d30d420a610199dbc0d090e9948a1a995893aa9fc6dbacf29f9b55617a75a808190ac65647f40413cee5682
-
SSDEEP
768:qyCVJxS1MAhNN6CALnzlS/2Lci8w3F5YuVLJ194OGoRspSy6wG5wT4rRMy:0nCMiNNbA8/2Q/w3F5Y8L7KoiShmg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 389ee9cb77ae863e21bd609193bdebc9_JaffaCakes118
Files
-
389ee9cb77ae863e21bd609193bdebc9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
'��ެ4b Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
h�oѯ@� Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE