Static task
static1
Behavioral task
behavioral1
Sample
be609daa8254f1a1c60a69bf20f090ae_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
be609daa8254f1a1c60a69bf20f090ae_JaffaCakes118
-
Size
6.7MB
-
MD5
be609daa8254f1a1c60a69bf20f090ae
-
SHA1
b18b51399a259280defe65ea9ca40580092f52e6
-
SHA256
fef65317018aace014fa022ad511d8a79299ec720af39b61f4c48a7e48367374
-
SHA512
d6bead3001719e2d8c8e2417edb8b74d8343e0cf70b7b4085160b2c66ab37e0c7d8e5206394f2f1bed8986959c219e3e258d9626d27211bc85b26ee614edc614
-
SSDEEP
196608:pKKymiJyadg09qzrmrOHaiRZRc0oX238vMrZ:4Kayvzrmr6aiRLcrh0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be609daa8254f1a1c60a69bf20f090ae_JaffaCakes118
Files
-
be609daa8254f1a1c60a69bf20f090ae_JaffaCakes118.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
Sections
Size: 552KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hgyxbruy Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wiceyjtc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE