Static task
static1
Behavioral task
behavioral1
Sample
de2d0ef59f632418ace9f7d7d0edb53a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
de2d0ef59f632418ace9f7d7d0edb53a_JaffaCakes118
-
Size
89KB
-
MD5
de2d0ef59f632418ace9f7d7d0edb53a
-
SHA1
09b2634eb59c99b3798ee9ef0ea6305c8757cee4
-
SHA256
8b28ade9ca9b450d62d6bb589dcc392c1be4729ad6c0d38c9833b4eec04c225b
-
SHA512
0bc903b3a9a8c9a00c5c428789128da3aeb2272f6d01a7e0b4df8178aec794813d43f32397027a6b83f52625082472b3d78cec0937c9a184636e73e264870ae9
-
SSDEEP
1536:Q8sjyxs1AxZgeUxRGQn9cbHikOdizDZt8ZJw8aGDEck8jwaaHw7Koj4rDMpaTZD:gjyxdZgdxcQKCddeDZKqGDk8jwaaHw78
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de2d0ef59f632418ace9f7d7d0edb53a_JaffaCakes118
Files
-
de2d0ef59f632418ace9f7d7d0edb53a_JaffaCakes118.exe windows:65535 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 50KB - Virtual size: 156KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE