Static task
static1
Behavioral task
behavioral1
Sample
7566aa5f7eb6a0438db2e993d92a9b2a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
7566aa5f7eb6a0438db2e993d92a9b2a_JaffaCakes118
-
Size
980KB
-
MD5
7566aa5f7eb6a0438db2e993d92a9b2a
-
SHA1
a3348b9641199e37b37531b2c743befb9b647bbb
-
SHA256
1181f481e9f6eb1f3008f434b0d3ae891f45464d4a5e5ee748bca5fefc5bdf24
-
SHA512
8e775c3a9244e90e4b8eb7104aec954bb2f384cde2cd902652264605928aaf01eb81c2cdef20491e6775d26ff0eed96ca47a43d7644ce557128f4a39e8b5b920
-
SSDEEP
24576:19mG+nQa4PNHxDh4JGg/ntBD2pU5zTcOn6MaR0m:KQa4PDhYPnTD2EntndaRl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7566aa5f7eb6a0438db2e993d92a9b2a_JaffaCakes118
Files
-
7566aa5f7eb6a0438db2e993d92a9b2a_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 876KB - Virtual size: 980KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE