Static task
static1
Behavioral task
behavioral1
Sample
f11327fee07f6a8747425f0d40051445_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f11327fee07f6a8747425f0d40051445_JaffaCakes118
-
Size
2.7MB
-
MD5
f11327fee07f6a8747425f0d40051445
-
SHA1
db6c443c1ad70540e0b609fa1f0d42177d77e32a
-
SHA256
f056e8c74db51be814b79ea33079638365caf3aaa68ab48019fa8e7067281164
-
SHA512
29cf7682924a4a426383425d9da81f407547453cd57f408233aabdb23286892ad1d712b38f61838242427f77dfb4f28014ad571333f218a04ff68db508ed01f4
-
SSDEEP
49152:c2p308Av5Tl8q6HcCmiE1td+p84REQQyheIF7W297kqDE8jC5r08WHuic:c2pEv8q6HnE1a8yJu+dzC2Oic
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f11327fee07f6a8747425f0d40051445_JaffaCakes118
Files
-
f11327fee07f6a8747425f0d40051445_JaffaCakes118.exe windows:4 windows x86 arch:x86
1743a5b9816a58c2129527a62802cc12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CreateThread
Sections
Size: 314KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iqgzeyus Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gxuhebch Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE