Static task
static1
Behavioral task
behavioral1
Sample
fb74ecaa1f9ae4aefd1cd2897cb37561_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fb74ecaa1f9ae4aefd1cd2897cb37561_JaffaCakes118
-
Size
2.4MB
-
MD5
fb74ecaa1f9ae4aefd1cd2897cb37561
-
SHA1
9076413ec4638c3cfa27408469c5cf7e15981bbe
-
SHA256
8ee96c1c7b83b8d24289ed12e999f996144348a50810ab8d24e62ce300f7419e
-
SHA512
9cef3bda6366c3ad3255f5f9108ab142e546472963102d3228ce6ea8810f450af804f3c7e986541d0aeae3433f47abd2b4d5c7d4b38fc1aeda1e3f8a340a4ff6
-
SSDEEP
49152:7EOS2b1QsWnXne0RPEic623zTQMWH77+ygSI/6hD79qJlUF:7E3OWXnJP+623/Qb7DgJ/6TqJq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb74ecaa1f9ae4aefd1cd2897cb37561_JaffaCakes118
Files
-
fb74ecaa1f9ae4aefd1cd2897cb37561_JaffaCakes118.exe windows:4 windows x86 arch:x86
cf3afa13cb4a38c3741b9573d5da93b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
MultiByteToWideChar
Sections
Size: 316KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qhetnezr Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ggqgmeoy Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE