Static task
static1
Behavioral task
behavioral1
Sample
685b1df819d62e407004f1cfeee85c6b_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
685b1df819d62e407004f1cfeee85c6b_JaffaCakes118
-
Size
264KB
-
MD5
685b1df819d62e407004f1cfeee85c6b
-
SHA1
a0a079553e2010f6f66cb4d62ad0081141822719
-
SHA256
b63b920033aae36cc940bd6cb472f07df0ceb01eb2777ec3dbe493ac1ad1388f
-
SHA512
8a658662b6a7cdc8f53390f28fd37f3baf8aa4cbd3e3b5b5d9ac7308328f13b81f4bcc6a33ac95d813611c19c85971bb863ef3c80a64235f33113e6232a8ef9b
-
SSDEEP
6144:C0iroS4C1VnhU/HYD14WYDvRGbY72YjDX+ZHlFY8Exrnw:Czp1V2/Hy4lO4fDX+uNw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 685b1df819d62e407004f1cfeee85c6b_JaffaCakes118
Files
-
685b1df819d62e407004f1cfeee85c6b_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 248KB - Virtual size: 452KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE