Static task
static1
Behavioral task
behavioral1
Sample
a5d02643368016d759d6a3b3f323cd28_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a5d02643368016d759d6a3b3f323cd28_JaffaCakes118
-
Size
139KB
-
MD5
a5d02643368016d759d6a3b3f323cd28
-
SHA1
6ee0976d0eea6e144c7342d38f6dc77d674f0d47
-
SHA256
bf09a5f79f36a308346ddd2048cc68621960e394a496d6ec8f7ac375f45ac43c
-
SHA512
e56d8e5442431c7aec9e832e430a2f744214890486a41d919a34d09cf72a9b1cb024b67cbce81e70dfa951162e8a770d83e8f3e35e9cfdac93d6d002ff5670f3
-
SSDEEP
3072:A03U5PHe0T5+t9IluMI22plivsKaNLKr9bgaxL03ArhS//DskZZJPw2f:A0+PHe0gt9qNI24ea1K5bno3q2DlZf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5d02643368016d759d6a3b3f323cd28_JaffaCakes118
Files
-
a5d02643368016d759d6a3b3f323cd28_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 62KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE