Static task
static1
Behavioral task
behavioral1
Sample
a2c6eb6be849b063bc45e9114f543888_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
a2c6eb6be849b063bc45e9114f543888_JaffaCakes118
-
Size
277KB
-
MD5
a2c6eb6be849b063bc45e9114f543888
-
SHA1
17ad7e00b27ff6605d6c9cc92e484de180fd0289
-
SHA256
3b72f46088f0554ee89a08507ff0695acad9c555d0f3a3858d969723cd592ac4
-
SHA512
4c77568c10d1774c5623eeb94e1c5141032c44c6629f3f91a77fe0e8c13a758be1d117f872de338fbf30bdce7cd9aa17b41f60482d3e04e1bf9d3e7253b593ee
-
SSDEEP
6144:eH0PQIW7BYcZ8jUbG5p60lM3OTS7SON/x9+jAWe6OlYmfm:eUP+F08GWiwjYmu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a2c6eb6be849b063bc45e9114f543888_JaffaCakes118
Files
-
a2c6eb6be849b063bc45e9114f543888_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 2.0MB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pe Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 785B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE