Static task
static1
Behavioral task
behavioral1
Sample
780dc8519ade7fc104f5625bc95404d7_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
780dc8519ade7fc104f5625bc95404d7_JaffaCakes118
-
Size
265KB
-
MD5
780dc8519ade7fc104f5625bc95404d7
-
SHA1
eb59610a47d8d31ebfe159f39e8551f8da347866
-
SHA256
8b08f49d7a3f55d793ee12af0866e6b2fd5706da40f1c40616918b10ce849f56
-
SHA512
31728d3f97a5142d4f2586a148db2923a9127eaa68e0131d1183ed7daf28bce75a1082d9fa206fa34cfb6f69769c63e290eb4e8dc97c23a233d771a70c028114
-
SSDEEP
6144:XmspEmpN5KGADpQWsOc0Vpte3uItyOq8e:2ipEnV6u0qH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 780dc8519ade7fc104f5625bc95404d7_JaffaCakes118
Files
-
780dc8519ade7fc104f5625bc95404d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
119ba01abad812c4a461368344bcd6cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.pepsi Size: 259KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE