Static task
static1
Behavioral task
behavioral1
Sample
4c889bbb32888fac576629a454a7cd0b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
4c889bbb32888fac576629a454a7cd0b_JaffaCakes118
-
Size
100KB
-
MD5
4c889bbb32888fac576629a454a7cd0b
-
SHA1
515cdd48ea8f4647b73bdcde29305d90eb754f32
-
SHA256
442f209fb18d78eb30f5e3cdaf73a4a03edff0d8801f63432ff9ffe67f475a9e
-
SHA512
d2c164e2c416083a9ffb882f3acdfea55f6f2f60f6a458bd457a4a747740fcbb8cb13c2cc293695b3044294afe1435f646c77f393ab351a2d741179f87047ef9
-
SSDEEP
3072:FwYLn4919swCk4OR3I9UGVk8jwaaHw7Koj4rDMHRO:LLnQ19sWRG4Sc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c889bbb32888fac576629a454a7cd0b_JaffaCakes118
Files
-
4c889bbb32888fac576629a454a7cd0b_JaffaCakes118.exe windows:65535 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 188KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE