Static task
static1
Behavioral task
behavioral1
Sample
f095e29853e1e726f87721e6fe630c19_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
f095e29853e1e726f87721e6fe630c19_JaffaCakes118
-
Size
423KB
-
MD5
f095e29853e1e726f87721e6fe630c19
-
SHA1
b01743b8c8df4e677b4dcc50205802fb9bd2aa28
-
SHA256
4071d927401bdec0f061fc4b004107fdd904ce4ee96b41689cb7aa86c3194f21
-
SHA512
05bc34ac7315badc4b2e4a1992a86f5f703dcee18a7773a1efed85eaa7e09d277b9502111c249741db4af6ec9658302b92d201dfbc72f4c0a7d350f3b86f2365
-
SSDEEP
6144:/lEYPpGHICoLFQuGlF2idZecnl20lHRxp3g/MegaSgDRpD3A8kRWtBGvgvm3r:PRweQLvF3Z4mxxEMegFgDRx3AgYUM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f095e29853e1e726f87721e6fe630c19_JaffaCakes118
Files
-
f095e29853e1e726f87721e6fe630c19_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 79KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE