Static task
static1
Behavioral task
behavioral1
Sample
355426a4c828669480e6dd3e60f35d20_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
355426a4c828669480e6dd3e60f35d20_JaffaCakes118
-
Size
6KB
-
MD5
355426a4c828669480e6dd3e60f35d20
-
SHA1
d03abad6c424ea10fb8a5fc287cdfc21044aafe2
-
SHA256
d7f618060cc57a20cfab2ce636e665479bfa361734d87c915a601863222fd8f8
-
SHA512
a716c3cfa56ee312e3a14f0e05762defb80c9e958d5e53086597efaf9198e9718220c97306f0b20e5c9378848b43c428219cf3216e30923cedf9e2f5a34c0a0f
-
SSDEEP
96:cYRPfD+3KHfWodzNlQfJkoy2DirDVrll9eYswPn5xoWOeWylUCSZ+hIAHxPf:LTgp4SfK2ifnhCWXWylUCSZ85RPf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 355426a4c828669480e6dd3e60f35d20_JaffaCakes118
Files
-
355426a4c828669480e6dd3e60f35d20_JaffaCakes118.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE