Static task
static1
Behavioral task
behavioral1
Sample
c1ac70951b49a9909a35518804009c4d_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
c1ac70951b49a9909a35518804009c4d_JaffaCakes118
-
Size
475KB
-
MD5
c1ac70951b49a9909a35518804009c4d
-
SHA1
bb9019a20fc8681966b9c127f016dd246743fd61
-
SHA256
ff1e3e5e89aab4fff3d77168086f78854fa3b9e8a1a8b11fb6c6b1f7931d66d7
-
SHA512
0942d17ba8dc778c34af60382503750975a1ca50e3398eac1791cd14242590b78983823d199affd76fc9478ec4ae1ac2f1bc28c79671fc582f47e9d22bc00ff5
-
SSDEEP
12288:sLMdx1OtQzVHYwSCXMDwhbL0++X7tsT3RUt9IwcPTDM:UkxMtQzhYwSNqblPT38Av
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1ac70951b49a9909a35518804009c4d_JaffaCakes118
Files
-
c1ac70951b49a9909a35518804009c4d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 125KB - Virtual size: 900KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Virus Size: 346KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE