Static task
static1
Behavioral task
behavioral1
Sample
483c27ae563d877144ee05131208d669_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
483c27ae563d877144ee05131208d669_JaffaCakes118
-
Size
2.3MB
-
MD5
483c27ae563d877144ee05131208d669
-
SHA1
d6de0fc9fe441a237880021389ac5b2357e48f43
-
SHA256
0fbf91fc09f4c4cd24de33c5277689e3690d17329ba4c2cd1e51e2b2e1400b0e
-
SHA512
ce0d32b0117e614dab6a7a707c89a4ed1e408173bae58d70cf93bacd45d206fb83ed160b6cd5395547d5bd04110df315429663232ca9f0b70094e760b314af6c
-
SSDEEP
49152:qlbZiLMAPEh+IC2DDeZXOYiJs99J6KFxZ9MAVrt2Y:qNZi4APEh+IC2DM4JsLZ9JVrU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 483c27ae563d877144ee05131208d669_JaffaCakes118
Files
-
483c27ae563d877144ee05131208d669_JaffaCakes118.exe windows:4 windows x86 arch:x86
06d90141d3fdab7f9e0de825e6c197f0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
Sections
Size: 30KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
errnkzrb Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
takgskxp Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE