Static task
static1
Behavioral task
behavioral1
Sample
8365a8dd1f4f5d33b59975c5a868ab84_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8365a8dd1f4f5d33b59975c5a868ab84_JaffaCakes118
-
Size
699KB
-
MD5
8365a8dd1f4f5d33b59975c5a868ab84
-
SHA1
20ea467f16cc7ea835b92fd27d86cca5c0ec9a51
-
SHA256
766bf1e50fd4ef4d928b65909dccfde58bcac4526c0aaaf2245ce39ec9b0d565
-
SHA512
130baf0e5e477ca6ea9d430b87a09c80728b3f5799fc817afd650b390ce52ca4c4d7379ce37a4519a7391d79f3612d83c3a0aeff5195a7fd9089ef3a275d6aa9
-
SSDEEP
12288:2E/5mGT3+ofA9MV3fgPKD4TXqP9hd9IgNcZaUT4qSyZSs1N864GueUor:2O89MBfgwaXqP9hSrT4qSAQro
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8365a8dd1f4f5d33b59975c5a868ab84_JaffaCakes118
Files
-
8365a8dd1f4f5d33b59975c5a868ab84_JaffaCakes118.exe windows:4 windows x86 arch:x86
58e683abec29a387daf56221678b4318
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
Sections
Size: 48KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sibfiwkc Size: 645KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
knezhods Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE