Static task
static1
Behavioral task
behavioral1
Sample
1521aa1fc11660d5caa76df55aba9ec1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
1521aa1fc11660d5caa76df55aba9ec1_JaffaCakes118
-
Size
100KB
-
MD5
1521aa1fc11660d5caa76df55aba9ec1
-
SHA1
0bf0f31d22869182d8156a3de425a042725f3c4c
-
SHA256
9d2af5bcb6bbe57570afb8b5bada0966e8bc5d71c7477ea7511926d7a6d7c781
-
SHA512
fc02fbf8d99dc0028c910c0fefb1d3ae069ae2d9ca72b90d85390aed525804112e1187d522eff62f2495e37b08584f8184cb9e5650bb5514fc9ecc37b53f5d15
-
SSDEEP
3072:DOOcouucCc6X55UaB4snSFhy6dwA8zt+hBYN8ZW:iXoR3cG5UMuKYwziBYN8Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1521aa1fc11660d5caa76df55aba9ec1_JaffaCakes118
Files
-
1521aa1fc11660d5caa76df55aba9ec1_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
CODE Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1.0MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ytext Size: 4KB - Virtual size: 512.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE