Static task
static1
Behavioral task
behavioral1
Sample
171fc1d5c6f6cf273a7377f10f4d3545_JaffaCakes118.exe
Resource
win7-20240419-en
General
-
Target
171fc1d5c6f6cf273a7377f10f4d3545_JaffaCakes118
-
Size
70KB
-
MD5
171fc1d5c6f6cf273a7377f10f4d3545
-
SHA1
dd42ecf877b256a229be72b07fee7910e85a7af2
-
SHA256
6f02eaa9ed7f5ed8c9935059a97196e40e25218af4d19ba3e5420debaa7f6fb7
-
SHA512
79f95c3345564904d4744752d9eb3f8717ed604b542c7bdef4a3e18d994ef21a17e3ca52ce4040da66f970cd894f16c96eb3aca7a7ae40d0796541126f21025a
-
SSDEEP
1536:m76s+2F1N3hC1Z7Rcv27Gf3Crhvm962EgPozbpTVcK:mR+uHY19yeaf3ELLzlhcK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 171fc1d5c6f6cf273a7377f10f4d3545_JaffaCakes118
Files
-
171fc1d5c6f6cf273a7377f10f4d3545_JaffaCakes118.exe windows:4 windows x86 arch:x86
85878ddbbdfa8920c009d5aa2efacde8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
VirtualLock
ExitProcess
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE