Static task
static1
Behavioral task
behavioral1
Sample
b24cf42f16537ebe42cecaaeda9328f8_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
b24cf42f16537ebe42cecaaeda9328f8_JaffaCakes118
-
Size
1.5MB
-
MD5
b24cf42f16537ebe42cecaaeda9328f8
-
SHA1
6c94d04ed399dc110cb2e1b53b17792c7314ac12
-
SHA256
ee6712b99ce83639bca29149c3ada698e174213624c844e7d872e8a1cec72c63
-
SHA512
4a8e25c919b6873a0bc09eeb2028625f1c7db32bcb59c23366db5632b5a03bb0a23fdd5d44869ed1aaae7300a54efee784cc9403aeebdf8b21951c5c242a3260
-
SSDEEP
24576:1apqSpSAG+w0YEP1bMNVBilvkKca0NuOmiKXOtjMkhyaueov7RC+:40SsL+wT36vkKRu5miKXYMkhyaXo7h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b24cf42f16537ebe42cecaaeda9328f8_JaffaCakes118
Files
-
b24cf42f16537ebe42cecaaeda9328f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc_0 Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
���� Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 4KB
. Size: 4KB - Virtual size: 4KB
1 Size: 4KB - Virtual size: 4KB
1 Size: 4KB - Virtual size: 4KB
1 Size: 4KB - Virtual size: 4KB
1 Size: 4KB - Virtual size: 4KB