Static task
static1
Behavioral task
behavioral1
Sample
a0a1f5cdef046df3ddc17393a4edfe17_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a0a1f5cdef046df3ddc17393a4edfe17_JaffaCakes118
-
Size
37KB
-
MD5
a0a1f5cdef046df3ddc17393a4edfe17
-
SHA1
e901c37258831b0bec3fe0e371e317c913b06596
-
SHA256
ba86e60fc326abc4f7a92d753e4a37fc7ae688312e048c0c76737c907625fcc5
-
SHA512
74e0d8057018fdab7898b885965bf487bf558cc699e29d31d8616990f17f9eb580b230c15898094cbd82f0ba99c78fed85deedde94b9fad95e1c755d8f79a29f
-
SSDEEP
768:K3ucqx+8KyWb+OqKzR67rgnvQjXFF4r+h:TcIJ2b+OqKz47rA6Xcr8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0a1f5cdef046df3ddc17393a4edfe17_JaffaCakes118
Files
-
a0a1f5cdef046df3ddc17393a4edfe17_JaffaCakes118.exe windows:4 windows x86 arch:x86
d436c55cc61e4d62b21359ff12be3c38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
MethCallEngine
Sections
.text Size: 16KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE