Static task
static1
Behavioral task
behavioral1
Sample
9ce9319f2295c0dd878a6313d7aea46c_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
9ce9319f2295c0dd878a6313d7aea46c_JaffaCakes118
-
Size
1.1MB
-
MD5
9ce9319f2295c0dd878a6313d7aea46c
-
SHA1
73822f5421347b398435f61117c8a3eec98d45b7
-
SHA256
2ea5a1f7cb4d06960fc9c361405df792c9eb8ff8ab96bcd561b10cbfb7f76f9c
-
SHA512
743392c1188d74be4e6c73bda507db1cf74ad35e35c4c4cc667fbc5ba2ab0902fc036f3ba57a6660666fc1b317cc9c1a4d7c7498ba13caa3f201fc701dc8ce2e
-
SSDEEP
24576:+4Z0zuPNyuDmXFcFUkmsDLtwCc26uGi2VCHXSBzTaDMsAQRp:++GuP8ymVwUQDLWpYgBzsMsAQRp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9ce9319f2295c0dd878a6313d7aea46c_JaffaCakes118
Files
-
9ce9319f2295c0dd878a6313d7aea46c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.code Size: 4KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.const Size: 475KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 588KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ