Static task
static1
Behavioral task
behavioral1
Sample
5d8c78e3f5b3b0223a783c1079d9a935_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
5d8c78e3f5b3b0223a783c1079d9a935_JaffaCakes118
-
Size
115KB
-
MD5
5d8c78e3f5b3b0223a783c1079d9a935
-
SHA1
ec62f04ebd64abf98afa925a9392a4528a7a0153
-
SHA256
68d48724291c692f952925e5eff3e2d5864fbf55900d89200b4f88642e2e50ac
-
SHA512
98806b1a3b9b15a329d4598ab332c64dc1bc865c878ae6f634d31dae5adca905fceeaffbe71d30b5a438ef8d73590222d7b49e2db819461a2c61b28a32358412
-
SSDEEP
3072:7R7nLW5GpCeo4eByRw0aaDaIF9GeQ0MwXuanaKWv+BxN:7R7LW5GhXeB7IF9HQCDWCxN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d8c78e3f5b3b0223a783c1079d9a935_JaffaCakes118
Files
-
5d8c78e3f5b3b0223a783c1079d9a935_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 111KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE