Static task
static1
Behavioral task
behavioral1
Sample
6312ed9ae5dbf870786130b0c364595b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
6312ed9ae5dbf870786130b0c364595b_JaffaCakes118
-
Size
244KB
-
MD5
6312ed9ae5dbf870786130b0c364595b
-
SHA1
10d967bb99bd21dd3631b897c42e9298fbb73335
-
SHA256
49f391724c3ba628badd050006b8fa3cb8132367c179ef90d72ae897390a209d
-
SHA512
82ae98e1d850d535cefb5d946c3c4f308eb97ef913a1f19f754aa17531d5d2adbefdcaade88e37b7a8971c1402a6a51d58fecda8b412efb9251b49590cd67552
-
SSDEEP
3072:NZkNG7wB9Q+Cp6WpxoiemvVLi/g5s0zIhVpmy+GPSfqpEEgccmZ9SyY4oZqEEK9n:LOhqzXoixxi/gfIhl+GP7ugcmGUQmTaN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6312ed9ae5dbf870786130b0c364595b_JaffaCakes118
Files
-
6312ed9ae5dbf870786130b0c364595b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 9.0MB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pe Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 785B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE