Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_2ea91b81165187327609096483a94fd2.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_2ea91b81165187327609096483a94fd2
-
Size
657KB
-
MD5
2ea91b81165187327609096483a94fd2
-
SHA1
050ddff76cc042cb7c2bb04cde1442e0b6d9e43c
-
SHA256
c40e720abaf0a59b5c6071fd11f4e78e0238c4c3408408cc3f72b93b419334ca
-
SHA512
d1fb9e49474330aba8570149c5b8b5157a7cee3e0a21163d1028c60b851004e4d806bae0849ceee840e16306a5ccd817d4f62b1372477ddd7793685e9f89ccfc
-
SSDEEP
12288:OS9qEQtRQkEa6JWDOp4rzfeiEopXvk4AnZ2zkPaCxa:FQ7zEa6oD643eZopfonZOklA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_2ea91b81165187327609096483a94fd2
Files
-
JaffaCakes118_2ea91b81165187327609096483a94fd2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.-PEP- Size: 11KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.TRIAL! Size: 405KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 236KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ