Static task
static1
Behavioral task
behavioral1
Sample
0770a1fc9f7928c5a27e4940c3cefb42_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0770a1fc9f7928c5a27e4940c3cefb42_JaffaCakes118
-
Size
143KB
-
MD5
0770a1fc9f7928c5a27e4940c3cefb42
-
SHA1
6b3555d154b874541b2d4e5e31ae1ab5fe8f5385
-
SHA256
b1779248b021b149d80c40950c77506aac61254de43818b3ed604295c923c471
-
SHA512
dbaa40dd2cf8f1b57e16b8c3296cc1de19ac31dc9c97fb5916abbb9ec0cffbc2268ce1b573313608c4665f1f2945f20c03a66eb4ee4630c9b7479087d4abf3ec
-
SSDEEP
3072:4GL2vhChvH2fQam4K/G/OdSBsl+Q5x3QqQsflDa9xC:bOU12fPm4K/G/fscQ8qQsfJeC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0770a1fc9f7928c5a27e4940c3cefb42_JaffaCakes118
Files
-
0770a1fc9f7928c5a27e4940c3cefb42_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE