Static task
static1
Behavioral task
behavioral1
Sample
a9281be699d3ce9ac49e5daef8a3fde5_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a9281be699d3ce9ac49e5daef8a3fde5_JaffaCakes118
-
Size
517KB
-
MD5
a9281be699d3ce9ac49e5daef8a3fde5
-
SHA1
48232518e2fb1203166fb5e312f04bf24a39de5b
-
SHA256
2a24670170392d17d7a4de47a98dbfab04f62745b50fc5048ddfec1baeff9ce0
-
SHA512
729bfb1194619ddd9bb3820200ffb46b6673de3324cc21c588076efdad91794b0379d9e35189bf32d7b99f52bddcce84114ed5ea7d5017d5445a3b8c52267661
-
SSDEEP
12288:ih6hCapGUNSob8ZgmT1n1Eq4gLdsYepBSQXlY178Sn:is9iob8WmT1n6ZKsY8BdlYWSn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9281be699d3ce9ac49e5daef8a3fde5_JaffaCakes118
Files
-
a9281be699d3ce9ac49e5daef8a3fde5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 504KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
and Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE