Static task
static1
Behavioral task
behavioral1
Sample
fad674e8c0df9904da4c7b30ce71d480_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
fad674e8c0df9904da4c7b30ce71d480_JaffaCakes118
-
Size
64KB
-
MD5
fad674e8c0df9904da4c7b30ce71d480
-
SHA1
b45b902df6b92f9c300787e85308163c4bc244a7
-
SHA256
af173373fd83a64ae732070e3e94341c5a1576a703ab1496fd6f42076bffd808
-
SHA512
fb704b30923a1f9347e1b5efa52f9ab8e23247a0213f6bf20a457d2c52af99bbcf8a2ee2e4802e1f2b610facb17b71f426177dfc15adedc40f5c36379965ecee
-
SSDEEP
1536:JshbFeD9EeXBTspgdJ8uJhQGy6S+ZkjzZ5XQ4FCrLoUpO:ClsJEeXBTsWbVy6RQZdXFyoUk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource fad674e8c0df9904da4c7b30ce71d480_JaffaCakes118
Files
-
fad674e8c0df9904da4c7b30ce71d480_JaffaCakes118.exe windows:4 windows x86 arch:x86
99f5b0b723d6fca2813f516623081e1c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetLastError
CreateMutexA
LoadLibraryA
user32
wsprintfA
MessageBoxA
Sections
.text Size: - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE