Behavioral task
behavioral1
Sample
JaffaCakes118_395d9d222212748bea7c6cce69624b33e5f567f923611f3a242bbb40a68bb3ae.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_395d9d222212748bea7c6cce69624b33e5f567f923611f3a242bbb40a68bb3ae
-
Size
504KB
-
MD5
ea2f85f03d443d08855399a4e07df42a
-
SHA1
dc1205fd905f1dbed4c961763e3ba0f206af45b1
-
SHA256
395d9d222212748bea7c6cce69624b33e5f567f923611f3a242bbb40a68bb3ae
-
SHA512
8d0bd4cb3f0dc434482d00ccb6bc6ad2d586bced04c362bda13edeab439bae3841a1ea1d62bf4e56c9e8287722bc454cddc44938d8ccf898b1ab47989e71ad1b
-
SSDEEP
12288:+bo7ydYUzsV7qJJHBaZuK6sfFCKsfZD1VSd:AcydvzsZqIuKBf2Ze
Malware Config
Signatures
-
Remcos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_395d9d222212748bea7c6cce69624b33e5f567f923611f3a242bbb40a68bb3ae
Files
-
JaffaCakes118_395d9d222212748bea7c6cce69624b33e5f567f923611f3a242bbb40a68bb3ae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 467KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE