Static task
static1
Behavioral task
behavioral1
Sample
a74dcdcc861c0e8eff9ef6c1433940d2_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a74dcdcc861c0e8eff9ef6c1433940d2_JaffaCakes118
-
Size
803KB
-
MD5
a74dcdcc861c0e8eff9ef6c1433940d2
-
SHA1
0809c35ed853e950ccad51adaa8f599d862447c3
-
SHA256
caec6cb42ec0d1113de3d3e8c6b3b4a64da2b22aa0a3b3f5fc3852b3523a9162
-
SHA512
97aea61013ebfe99af1a3c82a67e0e57f9e79c1bbb1b01439e99a460b86882342f2f1926eb0553335837d5064d5272d3c2edc91cadaa7fb7573f21df3fbb55d7
-
SSDEEP
12288:KDjmtzOQC7HXuM7fclcBft5urdBVrbeae3x5YkG8mtj31qHlhPF:KDqt8y40lcBDGH40Ltj8HN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a74dcdcc861c0e8eff9ef6c1433940d2_JaffaCakes118
Files
-
a74dcdcc861c0e8eff9ef6c1433940d2_JaffaCakes118.exe windows:5 windows x86 arch:x86
2c7e82c64f43f6c5578f03c538908437
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32 ole32
RtlUnwind �
Sections
.nsp0 Size: 300KB - Virtual size: 416KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 480KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ