Static task
static1
Behavioral task
behavioral1
Sample
4ae5fccdbf024f83fce772fdc7e53247_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
4ae5fccdbf024f83fce772fdc7e53247_JaffaCakes118
-
Size
18KB
-
MD5
4ae5fccdbf024f83fce772fdc7e53247
-
SHA1
e6256fe8f60a3b275c27f1b4929b33329b3363e8
-
SHA256
87498ccac77cbccce03110be6115a501365009f9634084474a1353ee14b26f06
-
SHA512
4bc07ece1c15f71534ce025b6e6de2239802d62a754eee9bbba50c484f9376a04c952cb67e3e604961fb083f79408a7e96f267a450fec61129be8b91927b5c38
-
SSDEEP
384:7GPndA8nQ+LBFSIcL2MucQnQSDd74DCoLj8Tne+bdabnbH8pX:7GvdRL3+qQox4eo3kSbHI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ae5fccdbf024f83fce772fdc7e53247_JaffaCakes118
Files
-
4ae5fccdbf024f83fce772fdc7e53247_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ