Static task
static1
Behavioral task
behavioral1
Sample
d642f00294fe8c72934b98f819ea0d7b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d642f00294fe8c72934b98f819ea0d7b_JaffaCakes118
-
Size
2.2MB
-
MD5
d642f00294fe8c72934b98f819ea0d7b
-
SHA1
456000d9197d29c76f2e5524ef1a64ad81f5b25b
-
SHA256
ba97fcfa25a3f344daaf0c3c102673ed5b5e45097090513fec84dab937f5b434
-
SHA512
83cd5237aa46f80d8853c008fef34fc1a9bfc703198067216cc51fb2fab7833176e6ee7671b018478de3e0285191a52d7d799a111db56d5fb97266099bb4ec78
-
SSDEEP
49152:02ARCZVUnpwEkoVD4NCoCCOEvqbJBs9vP:+RCzmpwETwFydB8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d642f00294fe8c72934b98f819ea0d7b_JaffaCakes118
Files
-
d642f00294fe8c72934b98f819ea0d7b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 883KB
IMAGE_SCN_MEM_READ
SE Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 1.6MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
SE Size: 24KB - Virtual size: 24KB
IMAGE_SCN_MEM_READ