Static task
static1
Behavioral task
behavioral1
Sample
1c5b9535d7f30faf5c7cf038946b99b9_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
1c5b9535d7f30faf5c7cf038946b99b9_JaffaCakes118
-
Size
168KB
-
MD5
1c5b9535d7f30faf5c7cf038946b99b9
-
SHA1
4398fbbdce9605f74c06be649bac3d20bb239e99
-
SHA256
2a901298895c8f5d9b7617448e0fa890931f82879e181ae102f7532738d5ca84
-
SHA512
3ee9b882d96e230afdc9b9e7da0ad360d6a51bfe66be86700afe2857ab3e9361065305d4a1ebe4bc4d1e574a4f87f6111771e33e966f69581f8d41a5aae66d3e
-
SSDEEP
3072:Cp5qYw6ZJWdcNS/LzEziHRhqEbLcV9Mmlx8EH2wqQQ:COYx/WUOL4ziHyEbLm2mlx8EWOQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 1c5b9535d7f30faf5c7cf038946b99b9_JaffaCakes118
Files
-
1c5b9535d7f30faf5c7cf038946b99b9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE