Static task
static1
Behavioral task
behavioral1
Sample
a7ae9f261ca6c9607de230addfc51fc4_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
a7ae9f261ca6c9607de230addfc51fc4_JaffaCakes118
-
Size
864KB
-
MD5
a7ae9f261ca6c9607de230addfc51fc4
-
SHA1
ac3a5d00d7fcbca770396ea9f4956aebc956499b
-
SHA256
1a0e65cfb8df885c2b5c21edeb8d5d4328abe5e0663b4613a9b9eae65ffb83e4
-
SHA512
d2fec796100bd47532e4a2c8efa9721ce5a8ad79a4baded8cffac27a5efb2f3bd82f935c5f84e6721cdb9d90be0fe39161d48a304cce19b6d9fb9d204e5269e6
-
SSDEEP
24576:tfCt7kuPLwIpPBwcW1cAoESaFE6OqlArMM6:tfekuPLvBwcicdED6/kArMM6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7ae9f261ca6c9607de230addfc51fc4_JaffaCakes118
Files
-
a7ae9f261ca6c9607de230addfc51fc4_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 827KB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE