Static task
static1
Behavioral task
behavioral1
Sample
8b1cce2de58803cb9f5a63658108777d_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
8b1cce2de58803cb9f5a63658108777d_JaffaCakes118
-
Size
2.6MB
-
MD5
8b1cce2de58803cb9f5a63658108777d
-
SHA1
e841b23ccdc2fdfc544a90f544fefb863667fce5
-
SHA256
ba763913005bb65888a8b72ae3c63612e21d82fba7cf6bef99c0aaa7eea1409d
-
SHA512
e7c6cc7b57ae7524aa68d53a66b86b329257ed7d757a673477d6be47139dd61ac5ac7d8f08bb51e7b170f0aaa50696c0f98644c8857e74324f8f9d785414880a
-
SSDEEP
49152:VZMHElFFNAvk2xQW/dixHLfM4eG4REYkAo1kdaMqa8hCuG4Z:VC6Ok2xHE2G4vom7B4Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b1cce2de58803cb9f5a63658108777d_JaffaCakes118
Files
-
8b1cce2de58803cb9f5a63658108777d_JaffaCakes118.exe windows:4 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
Size: 319KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eoecuojq Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kfyksfng Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE