Static task
static1
Behavioral task
behavioral1
Sample
f61e1fc6f6bd21d8ed5ae8cf9fed60a6_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f61e1fc6f6bd21d8ed5ae8cf9fed60a6_JaffaCakes118
-
Size
2.6MB
-
MD5
f61e1fc6f6bd21d8ed5ae8cf9fed60a6
-
SHA1
8276bc04b0b057754e31e2f97a1d0f7762f6fdb1
-
SHA256
e036972ca882a3b18d734463baafb7fc5b51b60e9d71f8a149a9dcb483abb5e7
-
SHA512
0e1b234d85eb9b3d41911fbac8653f48607fc4687ba1ccceefb0d69db47a303cc0806157369013cac7ee4aac630b9e0a9701abf74d9650193189ca5cf4f82f14
-
SSDEEP
49152:Af8tzkAv0j8pQWf5PnAP9Mge1xxIUj/IH1LRl37VI26dSs9:iQzkZYpQWf5Pw9MdvIUj/2Rl37TiSs9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f61e1fc6f6bd21d8ed5ae8cf9fed60a6_JaffaCakes118
Files
-
f61e1fc6f6bd21d8ed5ae8cf9fed60a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
3ce8605f4572d09027ece14b34fde472
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualFree
Sections
Size: 316KB - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rreywxvr Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qjfrkfju Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE