Static task
static1
Behavioral task
behavioral1
Sample
a200c5c518e06dce3b80eefc539bd3ff_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
a200c5c518e06dce3b80eefc539bd3ff_JaffaCakes118
-
Size
975KB
-
MD5
a200c5c518e06dce3b80eefc539bd3ff
-
SHA1
40e53a05fb71e8f807ddee813bcc8f44feed9880
-
SHA256
35e4fbed504f7b57faa06a3056997b4b7c63ca0970c345bbd977ee479951b1cf
-
SHA512
e717e2b724473052f89d8c4d3f47713d1c0f2ddd9fae0e42c54578925c5883dd18e11debd99e832aa1a7129278f533d189795fb67ceaaf4eaebde3069be8eac2
-
SSDEEP
12288:oZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZh:ommmmmmmmmmmmmmmmmmmmmmmmmz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a200c5c518e06dce3b80eefc539bd3ff_JaffaCakes118
Files
-
a200c5c518e06dce3b80eefc539bd3ff_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 33KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE