Static task
static1
Behavioral task
behavioral1
Sample
1281a3f9a49d7b9eeb04830e7a96c557_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
1281a3f9a49d7b9eeb04830e7a96c557_JaffaCakes118
-
Size
1.1MB
-
MD5
1281a3f9a49d7b9eeb04830e7a96c557
-
SHA1
220896a7f387f4f367e0a90f9e591b6a4990216d
-
SHA256
8808b9b2a76ec261b9dde6cba1a98a0512af65b718805e1c115f804ea9c0bf5f
-
SHA512
e3f8f5149c781bea3b1459c26e606ee5ad9dfc8ac5f9fd5baf70a4908400a90cec8dc307f04efab4ac769e595da84672eeceb3ae1bce1cc214990d97dc590ffd
-
SSDEEP
24576:Yhn5cDENWd0aRY9LgONlSHj0IxY+kisILoMPPWbHUgbU0YEnhXTZv:EaK1gOXoj0IxY+kJEDPuvbaEhX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1281a3f9a49d7b9eeb04830e7a96c557_JaffaCakes118
Files
-
1281a3f9a49d7b9eeb04830e7a96c557_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 319KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
New4 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 745KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE