Static task
static1
Behavioral task
behavioral1
Sample
7550fd18081e23fb25a143bd4f891248_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
7550fd18081e23fb25a143bd4f891248_JaffaCakes118
-
Size
691KB
-
MD5
7550fd18081e23fb25a143bd4f891248
-
SHA1
3eff681b6b1f9f12d4de50c0a5c49592d2d634f1
-
SHA256
92ed5ee35da25e225a0f569686ee70ff46b5b184aec7f719b6c7cd51835ee1f6
-
SHA512
1076accc2c0b47b12dfbe3b4578a29ab3a582003ca682ec59b4ecfa196ba652c24fdc9eab8adb2e30e58b528702f70218710c078d41d8a42a39ecddd24fabddf
-
SSDEEP
12288:rmBbEdy9B45Y3pyBTbgzmYOg9BocSCt2/i14Dchik7aFZHyri75yt2:rQbE445YZyBICcLD3Oi1acUZn7c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7550fd18081e23fb25a143bd4f891248_JaffaCakes118
Files
-
7550fd18081e23fb25a143bd4f891248_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a7fe099da34cd07f5d172de83e30c0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDriveStringsA
Sections
luiwwowr Size: 29KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sjmeowdz Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sxpaebax Size: 485KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lrjmdhsh Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE