Static task
static1
Behavioral task
behavioral1
Sample
9efd44a68cdbb7758112490bfcf2f063_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
9efd44a68cdbb7758112490bfcf2f063_JaffaCakes118
-
Size
682KB
-
MD5
9efd44a68cdbb7758112490bfcf2f063
-
SHA1
418759c0293f2e121ac1edef720f87c0d647d565
-
SHA256
1a2d8df8fe147558d5e3ccc878ec21b01d2f23a4d04f35685f5e649314b8cc2a
-
SHA512
9348dcd95843f2aad0d3f54921668565d496750a9eac32acfbcebc46fb59ad6f1f5a8e340e7f4b424e02adfe324570b86338df2da61f46337c59028c658f5551
-
SSDEEP
12288:XwGViS4Yil8MumG/eskleJmIT0LWPSxG0RwQMT1VQNlFZUDK+sF6NrusVnTqlA0o:/VioilFumG/esi00KQG0RwQMT1VQNlFu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9efd44a68cdbb7758112490bfcf2f063_JaffaCakes118
Files
-
9efd44a68cdbb7758112490bfcf2f063_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
werwe Size: 629KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE