Static task
static1
Behavioral task
behavioral1
Sample
b38951ab6d05d3aa826dde1b332a2af9_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b38951ab6d05d3aa826dde1b332a2af9_JaffaCakes118
-
Size
574KB
-
MD5
b38951ab6d05d3aa826dde1b332a2af9
-
SHA1
27ca0a2c2dac05f37859a56f1373509518e54326
-
SHA256
a5a3dba429b3d7bd8e15f64484fb58dae9451c02249c224d0a7332b2735c9da3
-
SHA512
345770150d6bdbb242fd1660ff7056d5a384e72b64b6d6d167afec5f17ce09f54be23a8af61314ecd0803aed7c726e9690632d2c1f6d550e89f6ee83975f7d05
-
SSDEEP
12288:MbUr/PD7rW2BfEwM3AZ3E06nyqRc/Gg9XrNm2:QUr/6ufrL3ErjhO7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b38951ab6d05d3aa826dde1b332a2af9_JaffaCakes118
Files
-
b38951ab6d05d3aa826dde1b332a2af9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wault Size: 508KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE