Static task
static1
Behavioral task
behavioral1
Sample
7465d144344fd6a7eae41d54581e8b10_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7465d144344fd6a7eae41d54581e8b10_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7465d144344fd6a7eae41d54581e8b10_JaffaCakes118
-
Size
29KB
-
MD5
7465d144344fd6a7eae41d54581e8b10
-
SHA1
ba3fb1543af81df36b777141065f956142cce74e
-
SHA256
8d387303bd9c2f0a5b3395c49e410fbfbdca0c4a0c93ac02b0b202787937ab14
-
SHA512
5ad906b73ef1d07b61d2a73e02b7a939f50c3467ca9338833c5fc339f2e6103b2183cf1cdbc91de7205d100f29183e9bdc5f275c6f8a127c8c01c3f1e05c1f8e
-
SSDEEP
384:1XyAFd9ky3T8JnFf8ohNmMqV0xpp7UhuMPid2xwD27etdbjPWGDqfhV/4tKFcORA:vdonFf8IN4gQh9xxweeLPDqfhdn0bBX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7465d144344fd6a7eae41d54581e8b10_JaffaCakes118
Files
-
7465d144344fd6a7eae41d54581e8b10_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Ramzey Size: 104KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE