Static task
static1
Behavioral task
behavioral1
Sample
83aae4766fca8af47922e9be605d371b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
83aae4766fca8af47922e9be605d371b_JaffaCakes118
-
Size
352KB
-
MD5
83aae4766fca8af47922e9be605d371b
-
SHA1
ed5f7a6704f8c3298099cac2c99fbe31d65a2015
-
SHA256
62f832285c0b5b5500d919cc4b2b755b5c18cfcfd65482c1c8f3ba65dd8e3aa5
-
SHA512
adf0422529cfb5fb0086eb117ff0ec60b2eebde4fd203f15f7a0fe75cbe76f6ca16d952aed502d1201e825f3b716088320a43fc5a8a577053d50a1c558440141
-
SSDEEP
6144:NXANDZeoig9dqzAe2AeFi2gKIOh8e01z+Qy7cL/2heFs1Z9skr/E5q:NQNFwg59FUK/Vo+e2hXJr/Ek
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 83aae4766fca8af47922e9be605d371b_JaffaCakes118
Files
-
83aae4766fca8af47922e9be605d371b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
eaeeat Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
yahras Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsgharh Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rhatt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimP Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE