Static task
static1
Behavioral task
behavioral1
Sample
832ad529d0b2acf1c34918f46b24cc54_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
832ad529d0b2acf1c34918f46b24cc54_JaffaCakes118
-
Size
183KB
-
MD5
832ad529d0b2acf1c34918f46b24cc54
-
SHA1
db1071755247e8247c4ab33b5791d01738223409
-
SHA256
e6896f9b3bb6642b58fdf5d9962372d12f09f5df9dd7e27962028cabc435172c
-
SHA512
061094fee102e2ecb081ff545881527858f9c0623c8414356b38d9ea7cee43e8a3fd7c410c0d9a799872116e4b2bb0eebe062b7ff63636bcdb163f639cd2b32c
-
SSDEEP
3072:5MZ+lfKp1zwLvT5GnTNOjsvwkEg8n2jEAhrB07dIEj1qh9xHRkgz:5JRKp1zYGBDwPzAVBeFj1q7xHRk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 832ad529d0b2acf1c34918f46b24cc54_JaffaCakes118
Files
-
832ad529d0b2acf1c34918f46b24cc54_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE