Static task
static1
Behavioral task
behavioral1
Sample
c81931f9425889fd9552532636ee97260aa3ab96366414e1c923f1ed59cdcde3.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c81931f9425889fd9552532636ee97260aa3ab96366414e1c923f1ed59cdcde3.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_3a8c60738c38ca5ea9ed5f4acf0ce57f9f654828c7c38a19415be9a148a6008f
-
Size
394KB
-
MD5
2a0279812ebe49afb40d22881b52d902
-
SHA1
499bbfeb745cc89416d3d418e525a899edbaff7a
-
SHA256
3a8c60738c38ca5ea9ed5f4acf0ce57f9f654828c7c38a19415be9a148a6008f
-
SHA512
25d625f6a3374c23d640f5f5b90bf534b6edeba64755ab3e6e3a2c1dc0d7481887893924d8796fc74e4f969dd432c5150f614c391679439aa85c3b8dd74f31af
-
SSDEEP
6144:ceBDwAjEAG1GfI/V1q8UWgZzrhEK0ZjjWO1rcU3xm7b7HLoS2AC4CJKy0NmNw:Z/AR1GQxcXWjprP3xm7nJ2ACJJI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c81931f9425889fd9552532636ee97260aa3ab96366414e1c923f1ed59cdcde3
Files
-
JaffaCakes118_3a8c60738c38ca5ea9ed5f4acf0ce57f9f654828c7c38a19415be9a148a6008f.zip
-
c81931f9425889fd9552532636ee97260aa3ab96366414e1c923f1ed59cdcde3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 572KB - Virtual size: 571KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ