Static task
static1
Behavioral task
behavioral1
Sample
ae056b796e32e05e02e953683b7b0bed_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ae056b796e32e05e02e953683b7b0bed_JaffaCakes118
-
Size
1.0MB
-
MD5
ae056b796e32e05e02e953683b7b0bed
-
SHA1
ce91aadd82d8f4ef4086e563e757fff99c4b5d6d
-
SHA256
20bc082ecc9eeb6e987d6c945e2d42154b89bd026b2f3dcdf55ca2fec04b1f88
-
SHA512
abdd8ffd683ba2f71a6d9279a467d9082385aab2edac13d9ed32c4b1650f6324842443ab87b7c5af2efd8ac5cbe1780000015f54d507e60a92c6c619a22e5678
-
SSDEEP
24576:uewV1wE35ssFvzVlFFB3PLJ5dtGVyD5OzErBVd:uewV1wysgB51JoVO5Ozynd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae056b796e32e05e02e953683b7b0bed_JaffaCakes118
Files
-
ae056b796e32e05e02e953683b7b0bed_JaffaCakes118.exe windows:5 windows x86 arch:x86
f515561a916f69daadaa28f00d574a19
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnlockFile
Sections
Size: 255KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 936KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xfzxqxdr Size: 761KB - Virtual size: 764KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zixatipx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE