Static task
static1
Behavioral task
behavioral1
Sample
fd50638f7ad2f29ee0ca1ea6f4095c4a_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fd50638f7ad2f29ee0ca1ea6f4095c4a_JaffaCakes118
-
Size
156KB
-
MD5
fd50638f7ad2f29ee0ca1ea6f4095c4a
-
SHA1
aa5b387b9f6326cd1a23bd0495e86115732d922d
-
SHA256
5b96eb35c64411c44bf6276b6f136814b635f016fa99f2b929da498e313a0689
-
SHA512
93d3e34f85c0a792dd34ebcf848bbdba65ece2ee89b3369e1c2d2535ce4a09a8000e82e168056d894140ee067e665219c83973faedac6da1e2e7a0c5b2221dbe
-
SSDEEP
3072:wgZSh3pjMxPRUj+Taqerx92dXP7rf94QX3KHc:FZSx++q69EXvfyQXaH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd50638f7ad2f29ee0ca1ea6f4095c4a_JaffaCakes118
Files
-
fd50638f7ad2f29ee0ca1ea6f4095c4a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ