Static task
static1
Behavioral task
behavioral1
Sample
83f93dd2f5c8fb1366eafeb2a061c40f_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
83f93dd2f5c8fb1366eafeb2a061c40f_JaffaCakes118
-
Size
304KB
-
MD5
83f93dd2f5c8fb1366eafeb2a061c40f
-
SHA1
801cbc09a1aa6d009da4b59dab4510682dd9823b
-
SHA256
320e0d7f54a207e8683829ea880024d8c307be8f3e763bf756b4a3e173e2fa34
-
SHA512
b969cb3f74d6ac65bc347dd8d4488dcf0749a85b4ef2fdefa7d594c7cc352a82077fa299a58b01adf29c485ed6ced0d7483b6665ef2b7952a710eb37cfb40139
-
SSDEEP
6144:mLZP7IUpaAALLhirTqYxkNDUGNnUeXAFRlBn6q5m54fDv:EPfaT4r12YGrXORj6qdfT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83f93dd2f5c8fb1366eafeb2a061c40f_JaffaCakes118
Files
-
83f93dd2f5c8fb1366eafeb2a061c40f_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 294KB - Virtual size: 580KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE