Static task
static1
Behavioral task
behavioral1
Sample
3752ed474219d0933bb98303e6b2b076_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3752ed474219d0933bb98303e6b2b076_JaffaCakes118
-
Size
657KB
-
MD5
3752ed474219d0933bb98303e6b2b076
-
SHA1
28b62fb4bb889d46a6785ade1ff0e1a6c044a075
-
SHA256
f136089e457b31a718d0c22e0f244b96877cff217119bbccf693b50e5e9113fe
-
SHA512
2291632e7a2ef188d904f07c1a554319c5697074b20c1db89ebc8c5e7292e8baee84b695422833b48f9b40c5f37bba6468990147df829b054cef1d7bc05a387f
-
SSDEEP
12288:TSyMJfsGLCD3jpE3wvIhnpvISQgq4VcD2TmjWeAesdaGrLM4eOXnf2HKLP1:2yMJfsr3jpC5qIZiWeorMSXnfuu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3752ed474219d0933bb98303e6b2b076_JaffaCakes118
Files
-
3752ed474219d0933bb98303e6b2b076_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ