Static task
static1
Behavioral task
behavioral1
Sample
04bbde479b2fc0ad15bb48f40d200e32_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
04bbde479b2fc0ad15bb48f40d200e32_JaffaCakes118
-
Size
210KB
-
MD5
04bbde479b2fc0ad15bb48f40d200e32
-
SHA1
d2621dc352760102bce524a17c072edde9ea364b
-
SHA256
78322b67035bb27249465d51ac4905d092be7c664220b25ed327ac6730e9c986
-
SHA512
41e0d619bdde591a456c80bf3d3a6b87028967b9e7b5d7710ae79db3715b8062ed9d5fabe8a7407300c18e3d2ff2205e6189ad6546663b4afa1590357c508467
-
SSDEEP
3072:EhOm2sI93UufdC67ciyt3ujFf7TQsq5VaQvO:Ecm7ImGddXyt38TU5m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04bbde479b2fc0ad15bb48f40d200e32_JaffaCakes118
Files
-
04bbde479b2fc0ad15bb48f40d200e32_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 155KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE