Static task
static1
Behavioral task
behavioral1
Sample
2015-07-27 10.34.06 voice.wav.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2015-07-27 10.34.06 voice.wav.exe
Resource
win10v2004-20241007-en
General
-
Target
9881d442ed201a323c7055ab8b1b0cc0_JaffaCakes118
-
Size
66KB
-
MD5
9881d442ed201a323c7055ab8b1b0cc0
-
SHA1
17aa80f38cf28046230d590c9a9840503bb911ec
-
SHA256
989fc2fa2a1a57672bbc9d8ed02463000769c9e69508e4c0f9c8bedbbe53d565
-
SHA512
0fdc4276af603eff1188f98d81972b98f0c7a4a20fde9ee2f49e1dd657e244e2115f9974e706fc0f2b2adf8fcf2fbcb30c179e8e04fb5427844ca89390cbfe4f
-
SSDEEP
1536:ZijoqOkSvphHP1HDYObBAG88zff0B/xDy9QqqVspi3IHBR20A9h6:ZA7iphHF3lacn0BJoQVmpiqGb6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2015-07-27 10.34.06 voice.wav.exe
Files
-
9881d442ed201a323c7055ab8b1b0cc0_JaffaCakes118.zip
-
2015-07-27 10.34.06 voice.wav.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ