Static task
static1
Behavioral task
behavioral1
Sample
ff62d945af719b9ebd0c54ec2d395ea3_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ff62d945af719b9ebd0c54ec2d395ea3_JaffaCakes118
-
Size
1.2MB
-
MD5
ff62d945af719b9ebd0c54ec2d395ea3
-
SHA1
ac4f17d6e7681d2e833ffd9b8aa52bf2a90bfa3b
-
SHA256
1161eccd3bacb08b97081712c058c021f5d89757b51b237008b5a75dfa965921
-
SHA512
f7ce5e55a4df55c174e1c8b32843f0c286959e3f98c902a030039953e9bc0a732398b40dd4f4ecf6e7adbf2adfea700c4ebb07ba92b84684262c074a79a10deb
-
SSDEEP
12288:fR5dhuGRBTJkjkjVcXRUXETz3UQHS9ZeRepaA5jAJIq:fRXRvjVOUXK3ewRepaAa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff62d945af719b9ebd0c54ec2d395ea3_JaffaCakes118
Files
-
ff62d945af719b9ebd0c54ec2d395ea3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 29KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
asdf Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE