Static task
static1
Behavioral task
behavioral1
Sample
74bcd1e8b6ba6495df9f0c0e0f8f11ee_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
74bcd1e8b6ba6495df9f0c0e0f8f11ee_JaffaCakes118
-
Size
378KB
-
MD5
74bcd1e8b6ba6495df9f0c0e0f8f11ee
-
SHA1
a4201b9afb41f705421e416b6c40d4f992d97070
-
SHA256
6abd1b1292b063c6145cc7665801d443d7ca78470c866fa183c8c39dc18be2d2
-
SHA512
69e338eb3baa065186be3c0134113c206431ceea3ec0b298f01215e86f41a3fb6b2357524553bb447fda5efe6f426cee85fe47c97783fcfbda972c744153bff3
-
SSDEEP
6144:jJWCsJPr3+m0m9oPTLXc7ltdmPUwGddnfTeNpBrhE0yD3tR5iCNE/c:cTT0S2TL4dmPU1dNyNp5hEvDMc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74bcd1e8b6ba6495df9f0c0e0f8f11ee_JaffaCakes118
Files
-
74bcd1e8b6ba6495df9f0c0e0f8f11ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa77d18b40072a7e1dc36630aafffd27
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualProtect
Sections
.XPack0 Size: - Virtual size: 924KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XPack Size: 377KB - Virtual size: 377KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE