Static task
static1
Behavioral task
behavioral1
Sample
a79fb1e8dfd4ff020da5a56d71361acc_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a79fb1e8dfd4ff020da5a56d71361acc_JaffaCakes118
-
Size
620KB
-
MD5
a79fb1e8dfd4ff020da5a56d71361acc
-
SHA1
f4a440048b626afa0e1be9a147f58087b829075b
-
SHA256
925b00c54b17a65ee5b111cd2940c3e7dd6b7cdbbe761c0fef95626ce5dba331
-
SHA512
7e7f979777e558051d851a3cd225b2617a3ec9a223b9aadc436e8d6af7dcde30f85f1a50d665aaab1cf65df2e931e7a0e0aa4feb983bb80a1c607599e8c9fe56
-
SSDEEP
12288:vZAQsBZb0l+Fs8Slyhi7I14+Cg7HAZlE2bnBkcGTe1UuwIW+YbTw3T:+QsBZb0l4s8hhOI14+fibnPU9IWzy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a79fb1e8dfd4ff020da5a56d71361acc_JaffaCakes118
Files
-
a79fb1e8dfd4ff020da5a56d71361acc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rhkv Size: 603KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE