Static task
static1
Behavioral task
behavioral1
Sample
41b4b337561067c4f6496db2c057cbc0_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
41b4b337561067c4f6496db2c057cbc0_JaffaCakes118
-
Size
2.6MB
-
MD5
41b4b337561067c4f6496db2c057cbc0
-
SHA1
bacfad508d948dde7f82f20013ddcc791a6897ab
-
SHA256
5a39fec3b31b420d33783bb5e002c30a23dd02ef076cffadab7419c8a4776db0
-
SHA512
a3b451cfc0361940425abe7fe10be3f6f283838cb8708adf3c01a5f8e6155e437d6f9662061156ba07a76ed7fb500ac498f23cb6c9870cb015f817bdee70f204
-
SSDEEP
49152:E0TuiVOXGT2moakA+mqerF4bbepOiEphcBm4HMWsqkj6nnZThqw/CCJ:gTWT2KkiqerFx2jim4H9jUUZTlCC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41b4b337561067c4f6496db2c057cbc0_JaffaCakes118
Files
-
41b4b337561067c4f6496db2c057cbc0_JaffaCakes118.exe windows:4 windows x86 arch:x86
e54bd6d7e1f8cc11634350917c4eef06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCommandLineA
Sections
Size: 319KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gefrywfa Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mescwyas Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE