Static task
static1
Behavioral task
behavioral1
Sample
0efd98a88645931311d515fa6b479d3d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0efd98a88645931311d515fa6b479d3d_JaffaCakes118
-
Size
161KB
-
MD5
0efd98a88645931311d515fa6b479d3d
-
SHA1
d1498e0b3ba5af3f3f9e7bdc517879ae99b76b32
-
SHA256
d2cc1d6a7b1f1220a8d77c218b6b6b13c229eb8032f24171655a4b302db1cdf0
-
SHA512
8b05b2cec190bd8eb7057c911489ad0556df01a4533ba930169983aa5cd5f900b4f0a276b9c7d2c726d2c78ab75104da8b619734d1c4ee5c7f94bcc16ee04d35
-
SSDEEP
3072:8XFgYT9hJn3x8DlkL81VWAvq+Ifr/o2mkqTAmeKEOVFNxlfYF1anmC7o1x1:sgYT9hJn3x8D+iEGq+Srgm6pnxlS1anm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0efd98a88645931311d515fa6b479d3d_JaffaCakes118
Files
-
0efd98a88645931311d515fa6b479d3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
fsasgasg Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
saddddss Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
asasasas Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
holassas Size: 9.0MB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE