Static task
static1
Behavioral task
behavioral1
Sample
7947DAB5343F0215E070A8106D424E62.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7947DAB5343F0215E070A8106D424E62.exe
Resource
win10v2004-20241007-en
General
-
Target
95b4428b23e63d921fb5d27688c61cdc_JaffaCakes118
-
Size
395KB
-
MD5
95b4428b23e63d921fb5d27688c61cdc
-
SHA1
fd0b788794d1909b26adf874cafb21ba09941612
-
SHA256
c60517980f0d1cc66b3364b2ec26fc50d98148d4b412bcecae7cdd71cbe61b06
-
SHA512
8586b32c95e6630d5b2c41c71eba8b8996cc5fd32f7e978e4834dec60f3d7f09fc6c49d1af9325eaac7d7c4e0fc4a069a2e1b389e7ab174be504831133521cf8
-
SSDEEP
12288:Ou9xnKx3V6B56vUkPhUhZLBuVyzyBQoKjuq7jZSk:O8nKxlYahUhZtujBsjuaSk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/7947DAB5343F0215E070A8106D424E62.EXE
Files
-
95b4428b23e63d921fb5d27688c61cdc_JaffaCakes118.rar
-
7947DAB5343F0215E070A8106D424E62.EXE.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.code Size: - Virtual size: 516KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 384KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE