Static task
static1
Behavioral task
behavioral1
Sample
d6133e92a061f48e0bc1d394f865f9d2_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d6133e92a061f48e0bc1d394f865f9d2_JaffaCakes118
-
Size
755KB
-
MD5
d6133e92a061f48e0bc1d394f865f9d2
-
SHA1
cdf7cce3c8bbad13fb2a9a5b78df05c354575931
-
SHA256
6d8e272766011d93b5ff3f9aec01d5260482bc9ad3bda5acdd994c4c27832cd3
-
SHA512
58dfead23cf8b6add8186381fac770056783dbd867af48c4a5fb9c6b84223382d3b0c157b3b7889b174cb63560b5574b3fbdd56babe03d74dc980666c71bbcb0
-
SSDEEP
12288:bfOQa7XN+g40/hazULOKj2XZPrqcN4za1sy95AJASIM7ofDbrvmWd54+oiJsUADz:LObX+0/hazULOKj2XZr4zjy95AuSGfFm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6133e92a061f48e0bc1d394f865f9d2_JaffaCakes118
Files
-
d6133e92a061f48e0bc1d394f865f9d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.const Size: 459KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sec Size: 276KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ