Static task
static1
Behavioral task
behavioral1
Sample
ef91d3cca69c9930e23928dec84e86a7_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ef91d3cca69c9930e23928dec84e86a7_JaffaCakes118
-
Size
360KB
-
MD5
ef91d3cca69c9930e23928dec84e86a7
-
SHA1
815389e0754ae7555b3f3ada97c036dc396a01e1
-
SHA256
d7e2f7ad89df7ade204a3ab57db2e11ac330e2ff0b46ebb3cadfdb9412041184
-
SHA512
13c51353d501eb021bd04bc2b899ad6bafa414750f40ece5a442acb84da39702b12b26ab3fd53618850db54c43db9eacac273a4741c2d12e9196997136e2d768
-
SSDEEP
6144:lq6+mYa+PnUp+GfgIXpSlC0Ntzx5LQzOJonKDOKp3Qd2CX4a8gzWak0mbN+Ydbw:lq65U8p1fgIXpf07LDoKDBpA0C1DXk0M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef91d3cca69c9930e23928dec84e86a7_JaffaCakes118
Files
-
ef91d3cca69c9930e23928dec84e86a7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
KDxSoV Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GJa7ytU Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jE0FrPF1 Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EpH7eL Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iS7i Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hTNv Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
XIfK35p Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
v5pPpDh Size: 306KB - Virtual size: 306KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE