Static task
static1
Behavioral task
behavioral1
Sample
f574e691e370edd1d0dee179ef98a318_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f574e691e370edd1d0dee179ef98a318_JaffaCakes118
-
Size
310KB
-
MD5
f574e691e370edd1d0dee179ef98a318
-
SHA1
623d78f7dff671a4a1ded62a651287610c733521
-
SHA256
2cb33029304c77c9fcce863b44343f42a3428de36f261ab4475bdc0652df7b35
-
SHA512
7c1335f7ab3a71ae526660b798e51c6a5c3c3a07b10a471a8b346501e6296902ce07863e72442c461282cd7855af4e1e87d4ccd0ab30decf2341aa3368b6760e
-
SSDEEP
6144:EOTcmApyiUDoTaJRpi5yL2HMs8zHaZQo72fpcVszIlPFrNM/Es79N:EOIXpyfU5Ixo72fp7I3q/f79N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f574e691e370edd1d0dee179ef98a318_JaffaCakes118
Files
-
f574e691e370edd1d0dee179ef98a318_JaffaCakes118.exe windows:1 windows x86 arch:x86
6af22d8685b7cda1b89792ca8a0e4813
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
user32
GetWindowTextW
Sections
.text Size: 296KB - Virtual size: 468KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ