Static task
static1
Behavioral task
behavioral1
Sample
df17546c3982b6192b44fa30bdc679c0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
df17546c3982b6192b44fa30bdc679c0_JaffaCakes118
-
Size
82KB
-
MD5
df17546c3982b6192b44fa30bdc679c0
-
SHA1
d8f02f65fd20864fed8f106cba73584e81491dd7
-
SHA256
bc7ee1bb0ff37829e4df4bf4451fa12b8f565c18753771723c2fc094188622fe
-
SHA512
7de12d24dbb6c755b248a74c3dddd6ba7aaa4a1b4750f0848ec4c0876fc3152ededdb5cd493fde3b4a1434ea16f8aeacf0651394d17010ea0345be665dd15ce7
-
SSDEEP
1536:3Md4OCRt2coNFxMyAh1Ycif9RzfI0lVCqgnVf7XqiTofdKEcH5RdeC:3Mp8Qc6F43fSM0TCqg5XsgHTdeC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df17546c3982b6192b44fa30bdc679c0_JaffaCakes118
Files
-
df17546c3982b6192b44fa30bdc679c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
14e0a0bf358c686df9dabe492ad6556f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenA
InternetOpenW
Sections
.text Size: 58KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE