Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_31f08e959ff212c200960e619b8cb494.exe
Resource
win7-20241010-en
General
-
Target
JaffaCakes118_31f08e959ff212c200960e619b8cb494
-
Size
100KB
-
MD5
31f08e959ff212c200960e619b8cb494
-
SHA1
178dbd1a46d12386530fea2b4d04790b104b6316
-
SHA256
d464a3a24d069cd5c7d36d192131cd362edf309f3b577db3b6970d446f08a444
-
SHA512
1076b73307fe74c1551d0f83d222d4dc32bed3871e524a7193f3c625f5613fe2a5649f20988635e880ccf0ade76af87d87f3d69f569e6e2010cd051e47968b8b
-
SSDEEP
3072:lNDuhNig6LUD3DeCN6xvmBz/gxgGak8jwaaHw7Koj4rD8p2RPB:lNuF6LdwKALgxJGK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_31f08e959ff212c200960e619b8cb494
Files
-
JaffaCakes118_31f08e959ff212c200960e619b8cb494.exe windows:65535 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 188KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE