Static task
static1
Behavioral task
behavioral1
Sample
79947A03D09A25C885CF60B1EC5FE167.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
79947A03D09A25C885CF60B1EC5FE167.exe
Resource
win10v2004-20241007-en
General
-
Target
3f4e25d405eeef158a3b526d011b58a2_JaffaCakes118
-
Size
9KB
-
MD5
3f4e25d405eeef158a3b526d011b58a2
-
SHA1
5271fe8c0f2934d4907921f3d341e784963927a3
-
SHA256
68b817041d09b9c7b99e5cb32beee58a9046dbcf69f554c07b8cb4da0328d869
-
SHA512
6b925f05f6d8c31ee7fc83b8dd6886f6193ec7bda77aba274787ea31d694cc1ab270dad67cf50224c053aa430de6dfcfd43d5f301e78db9435ed6af391f96407
-
SSDEEP
192:EdKX8qraAvsd2LBopHRa4mgbMX1R8G7JM43Z06grEjS5:EWXvm2VopxnQXcGuYibYS5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/79947A03D09A25C885CF60B1EC5FE167
Files
-
3f4e25d405eeef158a3b526d011b58a2_JaffaCakes118.zip
-
79947A03D09A25C885CF60B1EC5FE167.exe .zip windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
SPD Size: - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 40KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE