Static task
static1
Behavioral task
behavioral1
Sample
88c1b6d2333e9530d6241bb38b4cfea4_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
88c1b6d2333e9530d6241bb38b4cfea4_JaffaCakes118
-
Size
5.1MB
-
MD5
88c1b6d2333e9530d6241bb38b4cfea4
-
SHA1
61445b40bd3ec097e16db67be2fc38c7ca389a3d
-
SHA256
abe325e451cb1d87c36c89922c00ceeeeba7508f564e3261bd469e937d6fa121
-
SHA512
c4611b54e5d291d2ffe74cea56da4b460f223e013a7583c1d594f2fd826f81792523a3e8a3ef60f48c946160e4d92a6880fdd5264b64ebec575884541770ea22
-
SSDEEP
49152:WsmZ0BJvyS9EQplsPhTpx29ZeTsq7stO5UNHeMAFr/Ugi:WpZ03vpmk6ha9AstOiIz5ni
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 88c1b6d2333e9530d6241bb38b4cfea4_JaffaCakes118
Files
-
88c1b6d2333e9530d6241bb38b4cfea4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 316KB - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE