Static task
static1
Behavioral task
behavioral1
Sample
a3c432470ebae965c782b4ebd0886707_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a3c432470ebae965c782b4ebd0886707_JaffaCakes118
-
Size
77KB
-
MD5
a3c432470ebae965c782b4ebd0886707
-
SHA1
b11cbe1df92b7148eb7a41d2a9ca79a5d588a5b2
-
SHA256
5ec620dc0a46e169c35264f948f274fc114af2f45312c6f3cd021bfd3daeb4da
-
SHA512
2a45e609706a34efc5a6a8c72a284dadd8902b131fcbd6838b90f2dcadf51c634f44ffddfeb80fde6f3fa96a01934a5410494a92a83e1a9cbcf5dd75ef670db4
-
SSDEEP
1536:x6nMbJmyAdUtf4CtGH2R6HJSpuSSLF+kqsaeyFUqcPoG3nNtg:x6MrGU1HtO2KOSLgk5yGqO3Nt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3c432470ebae965c782b4ebd0886707_JaffaCakes118
Files
-
a3c432470ebae965c782b4ebd0886707_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 22KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE