Static task
static1
Behavioral task
behavioral1
Sample
22fb416302bac4c27bda650d174fc896_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
22fb416302bac4c27bda650d174fc896_JaffaCakes118
-
Size
132KB
-
MD5
22fb416302bac4c27bda650d174fc896
-
SHA1
2771f6d9e1584cafbc4c97d8dd87bdddeaea9a75
-
SHA256
17e6abd283168a71fbc61bc7fea027c46267743a5d0cbc9ab2cbf46489f0611a
-
SHA512
be6aa20c64089f2f050a725b7ba3665d98696422972b4058b958927bb0898cd1b3baf44c56b1c16e6efa69456586d975f523eb6446e80897974301d3cc037fbf
-
SSDEEP
3072:XJD4q3zddFTPIlzun1CQl08IoI59yT2xq:XJD4qTD3I3s2M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22fb416302bac4c27bda650d174fc896_JaffaCakes118
Files
-
22fb416302bac4c27bda650d174fc896_JaffaCakes118.exe windows:4 windows x86 arch:x86
119ba01abad812c4a461368344bcd6cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.pepsi Size: 125KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE