Static task
static1
Behavioral task
behavioral1
Sample
a73aec53c820cd42e36250b9ebe22208_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a73aec53c820cd42e36250b9ebe22208_JaffaCakes118
-
Size
3.4MB
-
MD5
a73aec53c820cd42e36250b9ebe22208
-
SHA1
ab2946f849785a35223926d2cc155a609e4e8b35
-
SHA256
9e70ce1f2e3f7208a0224f00cbbbb74a4313045e307b3faf5444d1c07fe9d91a
-
SHA512
3025b002458c3e5777084038d1ddd7f7aa9c0cc68dbd659689d2cb867a53aef7b48a5c3a13d5301c68b31320a54aaf2f59ebf169b7a6703eee91fa38179dce12
-
SSDEEP
49152:POw6x52kZ5KxL+ONsn6aFe5M8Gbrwpa3cLvV6bAvxMTRpS9qdD5658eWhGx1GkO2:7g5zZXONk6b6g9b4bAepf14Px1ZO1E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a73aec53c820cd42e36250b9ebe22208_JaffaCakes118
Files
-
a73aec53c820cd42e36250b9ebe22208_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 6KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ