Static task
static1
Behavioral task
behavioral1
Sample
654aead8b5e4d3494f8ddeb5e6cebcd2_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
654aead8b5e4d3494f8ddeb5e6cebcd2_JaffaCakes118
-
Size
2.3MB
-
MD5
654aead8b5e4d3494f8ddeb5e6cebcd2
-
SHA1
aa7c21b075c23a76958b9c2741fec1f0057b7ed4
-
SHA256
bd2a21fb18b2159a184562f06fb8046f898f8b195ac6c030a62935ad0e4f29cf
-
SHA512
d8f2c0816a05d4ed0a336e6ec64b11d5f57bf8f36b561a371df5ec29f7e59d772828ae647dcba2570d40dfeeb7b6eb5e8473e5a11ae8606fcd70d865ab9b3452
-
SSDEEP
49152:+afjnOlCjK8p3yfxTZl/zFfsWhCThyEwVawV18HHhQDfk+slpc8:+YjnnK636xn/JfsLot4O1KBykrX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 654aead8b5e4d3494f8ddeb5e6cebcd2_JaffaCakes118
Files
-
654aead8b5e4d3494f8ddeb5e6cebcd2_JaffaCakes118.exe windows:4 windows x86 arch:x86
063a85806aad33357ead126a3cbb28be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPriorityClass
Sections
Size: 30KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wtsgdjnj Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dbmqoevd Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE