Static task
static1
Behavioral task
behavioral1
Sample
fd605d9739112bcc1cf0e7570d55043b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
fd605d9739112bcc1cf0e7570d55043b_JaffaCakes118
-
Size
1.9MB
-
MD5
fd605d9739112bcc1cf0e7570d55043b
-
SHA1
bd449c3726ca6339d24c789af3e6e03f2db873cf
-
SHA256
f43a6cbca9cb0d7fa2b8d3708a419d1c9b668eb797fcd853e37654c5f6250753
-
SHA512
c1d5a23c460faee42a108143945d279723a0eac84b16f698e4cb0ff7424c2314b4ceb24e7213d1dd1ffe311900a6d4d3c9833a57ac2b0b18297aa99e4b8469ed
-
SSDEEP
24576:/8fnzHekpDbVYXsXUno8vfK4dM+i6W4+ALzaKtZen48b7c6ND6uWFskYh1wpwmkk:krHVlYXvfZEmLz3c4U7cmDcd6a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd605d9739112bcc1cf0e7570d55043b_JaffaCakes118
Files
-
fd605d9739112bcc1cf0e7570d55043b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Turko01 Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE