Static task
static1
Behavioral task
behavioral1
Sample
a6411d7c637b6ddf012cd856f28f06e2_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a6411d7c637b6ddf012cd856f28f06e2_JaffaCakes118
-
Size
151KB
-
MD5
a6411d7c637b6ddf012cd856f28f06e2
-
SHA1
565241309e372678fae134cb3b3dcf0bd06d06e1
-
SHA256
f091f5b7640bd914bebcd52cd7afcda23e6315274189998a5b316a0e82ef8935
-
SHA512
f971aa4a3f39bf93b87d7da8aefcfdc69baec3d2ed41b03c3e0036243026e5548feae39e3b6b18824dd80e256f76925a3e6f8ee4c36f1a319e595bdcea921917
-
SSDEEP
3072:2iikUaFPmgRMNlPTGQQm6ytwZEsrYkK4kIzte:kk98gWNlPTGQQm6agrdjz4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6411d7c637b6ddf012cd856f28f06e2_JaffaCakes118
Files
-
a6411d7c637b6ddf012cd856f28f06e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 19KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 129KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE