Static task
static1
Behavioral task
behavioral1
Sample
62f69f0f54e0820a48240265eab6fb22_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
62f69f0f54e0820a48240265eab6fb22_JaffaCakes118
-
Size
18KB
-
MD5
62f69f0f54e0820a48240265eab6fb22
-
SHA1
759b53479412db8c07d98ec650ac900e564c526b
-
SHA256
1423d073854d96f0980718d5a8adbe8daf8d1876b10322d3a8c5ab2318f2d903
-
SHA512
5ab6f74d90eb914f80e6181b1c7a9356bf3acbb325deb765707b494b59efe326d4e184aacbf907dae6b93da2e8af4bec480325b9a9ca1387002fe54217d242e6
-
SSDEEP
384:FKmuFwxhfyj2y1zMEIvB270crmLvaUSeXTDeqY2vB9IEvlfKG8Ff:FKmueyjjzMLvs71DUlXTDe63L9fV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62f69f0f54e0820a48240265eab6fb22_JaffaCakes118
Files
-
62f69f0f54e0820a48240265eab6fb22_JaffaCakes118.exe windows:4 windows x86 arch:x86
807d4dbf88522aca43243ab895fbef96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32.dll.
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
Sections
.text Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE