Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4f1f41eb9a982c800b2967c915035db3.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_4f1f41eb9a982c800b2967c915035db3
-
Size
26KB
-
MD5
4f1f41eb9a982c800b2967c915035db3
-
SHA1
924f6e3d60caa403b609d23a63e79b275d958cf5
-
SHA256
ce8565d23873b4112e209eadccef3e3436f3d766375c2a8974f8de62df6c3943
-
SHA512
69b931dad22040f6e1f2c888ec88810818c0eb64c0d3c34d5626efcd06ea043ac74db64609af8fca97f7dbcbdd24969217bd0062811e9a94166ea750f46f559b
-
SSDEEP
768:bd5u7mNGtyVfR2sQGPL4vzZq2o9W7GtxMOBT:bd5z/fAvGCq2iW7u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_4f1f41eb9a982c800b2967c915035db3
Files
-
JaffaCakes118_4f1f41eb9a982c800b2967c915035db3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 6KB - Virtual size: 32KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��su�u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE