Static task
static1
Behavioral task
behavioral1
Sample
1176a95bb949f4aac0cbd6525e5dc4cd_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
1176a95bb949f4aac0cbd6525e5dc4cd_JaffaCakes118
-
Size
321KB
-
MD5
1176a95bb949f4aac0cbd6525e5dc4cd
-
SHA1
83dd79bdc36f7a98a7867ee3415425f2e6e90f95
-
SHA256
25158742937c8d6e4cf2c6b6d14de895924beddc075c332a6d7b1ff48a6f2151
-
SHA512
dc53ce0f53925cad5d930611d262c26f876ee246596fbce3c7914262d9ff9f91c4f59b64f38d92c9b5347d701c6fc18df21ddf6b9a756e93d9dd6975e50f834e
-
SSDEEP
6144:cFKoZTPsAbPN7tcWKRBl6ZslM/UNhPlajVeKlg0MoS3m6lPDm3vhJmyTI+uSoS:cFKisArR+WAB0yyUDNablg26hC3fJU+v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1176a95bb949f4aac0cbd6525e5dc4cd_JaffaCakes118
Files
-
1176a95bb949f4aac0cbd6525e5dc4cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ylzq Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ordj Size: 317KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE