Static task
static1
Behavioral task
behavioral1
Sample
436c259bebe6e8a2749ff53eaf67abb1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
436c259bebe6e8a2749ff53eaf67abb1_JaffaCakes118
-
Size
1.2MB
-
MD5
436c259bebe6e8a2749ff53eaf67abb1
-
SHA1
ca6599ec5435ea0637f93e5d5250f051a08ef0a5
-
SHA256
b9962babe8fc2220b0d3864904b31ed53b8e52cc2b4cc5eb36bb3cbc48fb4329
-
SHA512
6b165d84aa7fb33f2f4112421cf414de80c9d408ee82d15d34a3b074b4c3828ac817ca5a6880f04d409d9e631adaea4ad674dd5e17533d309817c407f71e8d96
-
SSDEEP
24576:N0FmrPIkwPQ//+fXFzkGOJxQv3bVAWKjS6J16oCrD5:6FaOE+fVwTPO7KuK1n6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 436c259bebe6e8a2749ff53eaf67abb1_JaffaCakes118
Files
-
436c259bebe6e8a2749ff53eaf67abb1_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 281KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 720KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE