Static task
static1
Behavioral task
behavioral1
Sample
f5239214b7e5af288d8d2cf6825df235_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f5239214b7e5af288d8d2cf6825df235_JaffaCakes118
-
Size
732KB
-
MD5
f5239214b7e5af288d8d2cf6825df235
-
SHA1
71b9ccfcedb4768e216b8717aa980c69bbc583df
-
SHA256
7651ecd2d956e78131f8ef0e9bcf589f0c827ecf473c2fdd517d3e651edc7bee
-
SHA512
945089fc528c45b6fbd53a06e917d7dfbfd502664d4664ba1d6d28307199d6204bdd2f7ae6ef97d154a32bebf880b57e498d3322bc1364d2d3445c6d2b15dd7c
-
SSDEEP
12288:JlEMPLcyHVDQa354aa9EgmWczMaFm3QLyoaxTGPs/lK6WC8hmFLCBftT011t:JlL3mMaNwFmAO1GP2IFC8hlV0Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5239214b7e5af288d8d2cf6825df235_JaffaCakes118
Files
-
f5239214b7e5af288d8d2cf6825df235_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.-PEP- Size: 11KB - Virtual size: 416KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.TRIAL! Size: 718KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 267B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ