Static task
static1
Behavioral task
behavioral1
Sample
a466f24490f6e8671e5418dbc5fdf4df_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a466f24490f6e8671e5418dbc5fdf4df_JaffaCakes118
-
Size
21KB
-
MD5
a466f24490f6e8671e5418dbc5fdf4df
-
SHA1
688ee5e9fe1360a34f7d4890df496cd2e3129fcc
-
SHA256
568ebf2dc6bf2adae3721db1b50d3bc50f9592558ab6d8492f1ed88e39260ba1
-
SHA512
2d50f83115418416ff8d5e32da2edd651137e6df59d6d1d68de5058da33c16240cd03395f6bab80d08073eecd148b7197b2b6342e69c8f1abe841cb237f26a50
-
SSDEEP
384:tQeC1XxcmEPX2UNUcHHynyrS7drJaKiw80sOrMgW5KNB/rP:mNhcmK28SnyGXaKtXem
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a466f24490f6e8671e5418dbc5fdf4df_JaffaCakes118
Files
-
a466f24490f6e8671e5418dbc5fdf4df_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 17KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE