Static task
static1
Behavioral task
behavioral1
Sample
605af4b2f236483af966ec518c763f12_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
605af4b2f236483af966ec518c763f12_JaffaCakes118
-
Size
412KB
-
MD5
605af4b2f236483af966ec518c763f12
-
SHA1
18406020373961db741efa06bb0b6735d5c09d02
-
SHA256
8dc850dd0dc9ca3d75cb26b55613d4aff4ac3d97f13a432b5fd404475dc6f530
-
SHA512
5b094de08c1bf87ecabe94654f9c84c01c5615bf22a6423d48897eeee04c52137c1c1abb861308e3100b36abc02cc177e5e6e0a4d649a25f50060babf2da600d
-
SSDEEP
6144:9BeHVsQ4FUogCKS3fVYkQ6WawS7T/LiCwIzH1x5XMTImRpYcKYFQ1WW+tL26/:/eHCQ+gQPY6WWXB7r5kDhGYz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 605af4b2f236483af966ec518c763f12_JaffaCakes118
Files
-
605af4b2f236483af966ec518c763f12_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 76KB - Virtual size: 16.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE