Static task
static1
Behavioral task
behavioral1
Sample
e75d25cad43f86023cd34149852fe3bf_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
e75d25cad43f86023cd34149852fe3bf_JaffaCakes118
-
Size
292KB
-
MD5
e75d25cad43f86023cd34149852fe3bf
-
SHA1
d3be946f3ff63ab3a568f7fa6e194b2c3735300f
-
SHA256
907260a26b042f0efa70fb78912c6ee56726fe5a7961808b65bafe08dc65e4b4
-
SHA512
a5f6d9639799bc869a415634d5e52b6a81db89e1e52573cfeda236e3b32db31fc89cfa2a4f0c5866d306c0e5cdef54fe2f4fe9f166f32d827b746442f63588bb
-
SSDEEP
6144:qbX7LlBO63Ght0xoTkEqtNEpsDgbAdN8c+DT5aFldcVAl2M9g9vsqCC+O2bq:yrLTUkdb+BaFUQ2s6vD+OL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e75d25cad43f86023cd34149852fe3bf_JaffaCakes118
Files
-
e75d25cad43f86023cd34149852fe3bf_JaffaCakes118.exe windows:4 windows x86 arch:x86
a0f778c82a9b2383927f5621312bc5fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
CloseHandle
ReadFile
GlobalAlloc
Sections
.text Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE