Static task
static1
Behavioral task
behavioral1
Sample
0568d834203a821adc0e5216acc7f03e_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0568d834203a821adc0e5216acc7f03e_JaffaCakes118
-
Size
1.1MB
-
MD5
0568d834203a821adc0e5216acc7f03e
-
SHA1
3567680470020ebffff962e3e4b44881040fa3af
-
SHA256
8533e761e481f7a76ed16bbc89a3f0e952507dcb19652967c03f2d7222965251
-
SHA512
af6e0e4bee76576167e04e552fc1f43042c51ac68098b7205cf1101ac5c63f75c28fb1f29d446465ed113ca3ec13a7963781a1ae1d422439560f44ffbd540616
-
SSDEEP
12288:AMzjmuPBpI3CTF9bc2fk00Vt6KK0igqgL:r2uPnIOk5Vt63XgL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0568d834203a821adc0e5216acc7f03e_JaffaCakes118
Files
-
0568d834203a821adc0e5216acc7f03e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 15KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Virus Size: 415KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE