Static task
static1
Behavioral task
behavioral1
Sample
d9a5dbeaf5c28763acd2563b622c8e9e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d9a5dbeaf5c28763acd2563b622c8e9e_JaffaCakes118
-
Size
53KB
-
MD5
d9a5dbeaf5c28763acd2563b622c8e9e
-
SHA1
01473ddc933a1c5fd3c35e09e5ba246189b9d227
-
SHA256
52eb4a80d5cea686999be733ff40ffeb91183bb67df3edc12f32b9cdae216ee1
-
SHA512
29772f3650b70209288864641f54e0031fcc95a66d0f82ff9e14865ca72dc26efcb2739433875fbbe7d8685a89f3e5e091aa8c2bc876d7fff40f18c735145840
-
SSDEEP
1536:MDyqYpQuvojTRyhZcpktk1nbXF+A3gtdj/PKKWM:jpTv2Rgcpku3H8eKWM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9a5dbeaf5c28763acd2563b622c8e9e_JaffaCakes118
Files
-
d9a5dbeaf5c28763acd2563b622c8e9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ