Static task
static1
Behavioral task
behavioral1
Sample
0f1af6d38381d93bb2b64df786a8a345_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0f1af6d38381d93bb2b64df786a8a345_JaffaCakes118
-
Size
344KB
-
MD5
0f1af6d38381d93bb2b64df786a8a345
-
SHA1
323868b1217aebb4b674c5eb67393e7fdf28881c
-
SHA256
73622d2d725ee4ba1fc13e0fea14f87c21f73a0a4c375c8e198277a3032d9207
-
SHA512
acdfd335383635bc4017e9e32578a3f78e2ca97efa6dde85eaa0519ffc035fe9c5791174ec789ac1d29a75ccb5c82b1b1913e74eb401f096bfc8ebefdf6c061e
-
SSDEEP
6144:XEObZHucI4VSvBjj5jqHRLFGYdrhGMfg9nnWgHqhg/GkjFSTuTF:XFHzISStlqxLFGktGKQnWYq5+SKTF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f1af6d38381d93bb2b64df786a8a345_JaffaCakes118
Files
-
0f1af6d38381d93bb2b64df786a8a345_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
XXXX Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PornO Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Bravus Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�uckk� Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE