Static task
static1
Behavioral task
behavioral1
Sample
f593a2374d0e793981afb0f1ffad2951_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f593a2374d0e793981afb0f1ffad2951_JaffaCakes118
-
Size
413KB
-
MD5
f593a2374d0e793981afb0f1ffad2951
-
SHA1
969323e788240d16059056420e4c510660bea6b4
-
SHA256
2347a4fe32e3d9dc84f47ab84dd70c3c6621a2ea4136c51696469d269726b11a
-
SHA512
2bde8608d1070c9b6307e816b1b6764a8ba078b2419b8a6dbbcc82ec36c037c27a0ab5049a0227247797dd958c95f81a652413a860e6f6862891e20bb718a839
-
SSDEEP
12288:BSFY/gbUTpTtgDEzWQzmYxYkxUR87AtXPosBiOXyKQ3pF:IFNU1TKDIzmYxYs0pJBiOix3pF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f593a2374d0e793981afb0f1ffad2951_JaffaCakes118
Files
-
f593a2374d0e793981afb0f1ffad2951_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 60KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Virus Size: 348KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE