Static task
static1
Behavioral task
behavioral1
Sample
3d1a19465adaaf6c6e992d4803fb1b79_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
3d1a19465adaaf6c6e992d4803fb1b79_JaffaCakes118
-
Size
82KB
-
MD5
3d1a19465adaaf6c6e992d4803fb1b79
-
SHA1
b44a7baaeb508d407d238303739804ad101c4ccb
-
SHA256
7b6623d6ebecbfb082df44da93698ca30e0d5613d2980c24593bf3e805f12a4f
-
SHA512
f429f54bc7213fd0bfede56dfbc5df75457d54579c5639748ea4df262e4621e1f2af9fafbd2c23a6ff8787b6e5875ba17cb16f28adc75280656e63785b4808c8
-
SSDEEP
1536:j4bklzJD1I3hW7xeMNCjP8vK8wR8fjNmXhuHOk5VD/YEpZvh:j4bU6yeztF8fjNQghVD/YEZvh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d1a19465adaaf6c6e992d4803fb1b79_JaffaCakes118
Files
-
3d1a19465adaaf6c6e992d4803fb1b79_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE