Static task
static1
Behavioral task
behavioral1
Sample
c00e0812211669d4e9c8b3520a3115ca_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
c00e0812211669d4e9c8b3520a3115ca_JaffaCakes118
-
Size
26KB
-
MD5
c00e0812211669d4e9c8b3520a3115ca
-
SHA1
a38a9f652a6629320b684e4c54b740de2ba75d92
-
SHA256
9fc7bd6c6394c57686df28e82ba4753b5044b16dc7d0b09bafa8e18b8c7f4235
-
SHA512
e084912d2a3d001e9b9241111ecfc29f158d1bd27e13e83e3eab0741bb338cbaedc2ab08d88ffee2b6a47ca9dfb2cecd66d69497266086c6a32faa5226fcf0e7
-
SSDEEP
768:kd5u7mNGtyVfhzBfQGPL4vzZq2oZ7G2xKpb0:kd5z/fht4GCq2w7C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c00e0812211669d4e9c8b3520a3115ca_JaffaCakes118
Files
-
c00e0812211669d4e9c8b3520a3115ca_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 6KB - Virtual size: 32KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��su�u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE