Static task
static1
Behavioral task
behavioral1
Sample
de20c03f382d527130ab109cba032fad_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
de20c03f382d527130ab109cba032fad_JaffaCakes118
-
Size
475KB
-
MD5
de20c03f382d527130ab109cba032fad
-
SHA1
67087a60658edb2de1a936a1461f6eb81320f28a
-
SHA256
388361568fc03529f853bab63ace2ddec22eaa3f3a262a445f70e7752679e0c3
-
SHA512
67840c8a1da8fd5a3c8e84f8930ea2161678d5de43c16bc784f6d87861e4c12436019f07dadbd5c91b8fbb9e06d70a44ff88e44047a235dc0d1b61bd92f47828
-
SSDEEP
12288:cLcNS8C2PkNLEaQT/eXnTvtI4zuo0AP1uG:cAE8MQaGWZLd0G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de20c03f382d527130ab109cba032fad_JaffaCakes118
Files
-
de20c03f382d527130ab109cba032fad_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 60KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Virus Size: 409KB - Virtual size: 972KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE