Static task
static1
Behavioral task
behavioral1
Sample
0e8d35f3bbc95962c6349899d163b651_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
0e8d35f3bbc95962c6349899d163b651_JaffaCakes118
-
Size
599KB
-
MD5
0e8d35f3bbc95962c6349899d163b651
-
SHA1
26ba20e6b03a49acbf6979891e4b60d3170e3a12
-
SHA256
5b3fd7431d3ce529a8daa19204da95663001266d34b6cb6b87ed0ae27cf61f4f
-
SHA512
e3da99c27afe07db0d0d0b2bd528b14808ebecaa7e4dcd07ddc63347f5205b553e9771a3521997cd5ca26b766916a14515171a455a5dc80321bc2baa2103823a
-
SSDEEP
12288:+yMJfsGWmCbzxhj9HDWKUquBJoxlj/woa8GXC3pKQJ3twdMAMH87rA:+yMJfs7/bzvjQTPBGFhGyQQxt4v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e8d35f3bbc95962c6349899d163b651_JaffaCakes118
Files
-
0e8d35f3bbc95962c6349899d163b651_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ