Static task
static1
Behavioral task
behavioral1
Sample
0851214338908a19195bca629ab00228_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
0851214338908a19195bca629ab00228_JaffaCakes118
-
Size
212KB
-
MD5
0851214338908a19195bca629ab00228
-
SHA1
804648ef016a3f0fb889228a70bcb78189a59d1c
-
SHA256
d3cf19c097334f7138630e2fe06585b80b25e5867e77e84415f01f0f411a796e
-
SHA512
3bd1e73dc52f66dd6f6fd56ba26fbd65d7c762a2ed1491532299d03fb2cce5ab73fadf826f46d41f8c08eb568d61b94fa1b3a9e8bba062a8a6c19be0d0891794
-
SSDEEP
6144:otqKopK4ivSq8Kweo5htrb5AcSli0JQVZkiWTfh:G4pKFKLfftnCTQVKiW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0851214338908a19195bca629ab00228_JaffaCakes118
Files
-
0851214338908a19195bca629ab00228_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�������] Size: - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
һ퓕� Size: 211KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE