Static task
static1
Behavioral task
behavioral1
Sample
440cad08d75df45ebefd1729413e9d0c_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
440cad08d75df45ebefd1729413e9d0c_JaffaCakes118
-
Size
5.0MB
-
MD5
440cad08d75df45ebefd1729413e9d0c
-
SHA1
de4b7d01cb38f55eb349df307cf173325e73e6c7
-
SHA256
d34eba50f36da9b625dd04ff05262bb90de5282433b1b8e04f32bca2fc68f313
-
SHA512
a0df252e6c2d9e7a0dcc3bb73978abd3f6fad86435c130ca88d580f9f160dffa41bc542f945ed3a971dc05eeef85c967ad140f615875bbe78eb021ebb6be8f25
-
SSDEEP
49152:tsmZ0BJvyS9EQplsPhTpx29ZeTsq7stO5UNHeMAFr/Ugi3:tpZ03vpmk6ha9AstOiIz5ni3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 440cad08d75df45ebefd1729413e9d0c_JaffaCakes118
Files
-
440cad08d75df45ebefd1729413e9d0c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 316KB - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 4.7MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE