Static task
static1
Behavioral task
behavioral1
Sample
d1e0b6f3c324f91c7db8ca2d31cd59ab_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d1e0b6f3c324f91c7db8ca2d31cd59ab_JaffaCakes118
-
Size
231KB
-
MD5
d1e0b6f3c324f91c7db8ca2d31cd59ab
-
SHA1
76b355f8238b372ac715bca4806c8003ac8c41af
-
SHA256
443eb4561093c223ad79c23e69be33f9a3e60e73c1921a6d690057e569a4871a
-
SHA512
4bb12d3b9d98cffbb943d1165592bf004645b3a15cc7f7d290371215b8edd1f540441636955f696dad1d9c91ba60559577148ed1aa3d8d1f529124c6145604dc
-
SSDEEP
6144:eoEdkmu85Dq+3qM3W7tfQN5/inEaMadDKNa1aILk71:ckmDN6M3atfQunka1KNaTgJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1e0b6f3c324f91c7db8ca2d31cd59ab_JaffaCakes118
Files
-
d1e0b6f3c324f91c7db8ca2d31cd59ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 55KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 140KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE