_UNHBLWHNN@0
Static task
static1
Behavioral task
behavioral1
Sample
07e5ddb200a5871807a9e10c1113770a_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
07e5ddb200a5871807a9e10c1113770a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07e5ddb200a5871807a9e10c1113770a_JaffaCakes118
-
Size
100KB
-
MD5
07e5ddb200a5871807a9e10c1113770a
-
SHA1
bee0d9859c07f6bb2589a8e1ad92c2ade51c1123
-
SHA256
a6b5f34a7388f80b48e46d7ba7491f536a2c64cc4a45b2edb2ce8b9d2799f028
-
SHA512
0f5d7700f9b4d1cb3a67ac9a405e6c315f007be989d392f0c93d81e811ada07094d47ec38fddcaac37f648804c86436c2da28e18657b5a12893573d81efe38b9
-
SSDEEP
1536:OjdcHa3IRTpsGb6yKGD/A94DjlBQd5a60kVP7O+6lElYIpNieVG:WdncT6G+yvTAyvQS65PZqElNNif
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07e5ddb200a5871807a9e10c1113770a_JaffaCakes118
Files
-
07e5ddb200a5871807a9e10c1113770a_JaffaCakes118.exe windows:4 windows x86 arch:x86
8be0eb6a17ce73d047f5545ca2a684b6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
GetTickCount
OutputDebugStringA
GetStartupInfoA
HeapFree
dbghelp
SymFunctionTableAccess
SymGetModuleInfoW
SymInitialize
SymSetSearchPath
SymEnumerateSymbolsW
StackWalk
SymGetSymFromAddr
SymLoadModule
SymGetModuleInfo
Exports
Exports
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ