Static task
static1
Behavioral task
behavioral1
Sample
d4a847fbc769c117e64dee45831a2b52_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
d4a847fbc769c117e64dee45831a2b52_JaffaCakes118
-
Size
812KB
-
MD5
d4a847fbc769c117e64dee45831a2b52
-
SHA1
19fbba630167b91ed03b6ce1c522f65569780730
-
SHA256
114c21a7f2b9c0899e6a1ac57b782e1c85405dc3925da36ba8aa76678d262801
-
SHA512
bb09bd100b302372d95159607ff66f93927a99db67a8d53bc7ff324017f0f47e6dd52bb35d80073dab2a131ad45f6b80aabcb152e4093dd4ced239cf4c11764f
-
SSDEEP
24576:J2cmIL4YBcaqgi2J+YK5o430p2o0eTRQxeF8e:J2CMYBcapDuWwW2o02eeFb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4a847fbc769c117e64dee45831a2b52_JaffaCakes118
Files
-
d4a847fbc769c117e64dee45831a2b52_JaffaCakes118.exe windows:4 windows x86 arch:x86
d146e26e4840cb4444b8be50f4ca3289
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
Sections
Size: 50KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
giszvcjv Size: 721KB - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fofdbkvq Size: 36KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE