Static task
static1
Behavioral task
behavioral1
Sample
624d1ace9692083cb6293fe686cb1210_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
624d1ace9692083cb6293fe686cb1210_JaffaCakes118
-
Size
113KB
-
MD5
624d1ace9692083cb6293fe686cb1210
-
SHA1
c537438ef9674c3fdb26f244b0b9b699452f864e
-
SHA256
49709f683f5ba63c866288c6cdd964be6cf536f58e964f06847dfc5c52f43e5f
-
SHA512
7aa69cf2fff4cd4151cb466c6f9422807e5439318e6b15d018180e8dacdc97c198e642806eeab5c8f0c5442f2efccc85fb7869a8b62212dc1b3861a17e630d76
-
SSDEEP
3072:kTY7VKne0w1GBcMc0ToVA+6moAiKkj2Xa7Ur:sgVH0wcjc00B4yV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 624d1ace9692083cb6293fe686cb1210_JaffaCakes118
Files
-
624d1ace9692083cb6293fe686cb1210_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE