Behavioral task
behavioral1
Sample
JaffaCakes118_24e996f935d22120a530fed5fc8f058af9416868edc4a756030c00a88b66f2fd.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_24e996f935d22120a530fed5fc8f058af9416868edc4a756030c00a88b66f2fd
-
Size
504KB
-
MD5
11acbdc0c6b7322c8103fbe98ff89071
-
SHA1
34517cc4a8de1d314aa6bc50d30a76d26e8ae935
-
SHA256
24e996f935d22120a530fed5fc8f058af9416868edc4a756030c00a88b66f2fd
-
SHA512
8803e1cc6d549101df4b11059919b6abc5fbafad278509310f5f651421b1f5e852511eeb5a72ace98665b25c6b06b1b9cd4a8de179dc3d48e7e5a34014a1a14f
-
SSDEEP
12288:GsrjeS3UVprYfELtx6uz6s3Q4KsfZVMtS6d:bHeaUVxYVuzB3hZS0a
Malware Config
Signatures
-
Remcos family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_24e996f935d22120a530fed5fc8f058af9416868edc4a756030c00a88b66f2fd
Files
-
JaffaCakes118_24e996f935d22120a530fed5fc8f058af9416868edc4a756030c00a88b66f2fd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 467KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE