Static task
static1
Behavioral task
behavioral1
Sample
651da1d632189bfc4e2b942e69178114_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
651da1d632189bfc4e2b942e69178114_JaffaCakes118
-
Size
1.6MB
-
MD5
651da1d632189bfc4e2b942e69178114
-
SHA1
ded93b4b4663b7ddaf7699f75ca0db1e6b9e4398
-
SHA256
0317d1220c1ca6cbc4597fa9c2c70afbf2ad8ca970ea90ee4228ccefcc8cf499
-
SHA512
81059576e69fe71b3dadd99642f589a49c1af9560dd3631e2953ebfa50d0743efc4fc77953e7d08da74c72606ac44b1c08c3b8151ae50c68d1076b07b805b3fc
-
SSDEEP
49152:xBmbw9KBxbuRiF9QViF9tHB061O/Xsj2Hv:Pmb4K/aYF+VijtHBc/Xw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 651da1d632189bfc4e2b942e69178114_JaffaCakes118
Files
-
651da1d632189bfc4e2b942e69178114_JaffaCakes118.exe windows:6 windows x86 arch:x86
ea0e6b8624fb2d1fa46cff90e0138d2a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtect
GetLastError
Sections
.text Size: 1.5MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ