Static task
static1
Behavioral task
behavioral1
Sample
ac0e55df3c0e5afd5a7f98201640d337_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ac0e55df3c0e5afd5a7f98201640d337_JaffaCakes118
-
Size
140KB
-
MD5
ac0e55df3c0e5afd5a7f98201640d337
-
SHA1
e04bc7d9090e3f82a5504041b6ff1f3c4b3c1ca3
-
SHA256
7ae7eedc2286026ffdceee1464bccf1ab6466ae05f12dfadb17ba31e18df4b06
-
SHA512
fbe4063edd1ed3e46efec123326cce0dfed14bc692a60fa1b5c31a29964d6c6193caaf9afcf45c826233777656624aad6afb6b663b1b11d1b31e0fee5e776037
-
SSDEEP
3072:eEB1WD2tRhvCDr7+a2d1YNOoN4vNNlu4gCuTyDupXLmGA:riD2taDr7L4YloluguTBp7O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac0e55df3c0e5afd5a7f98201640d337_JaffaCakes118
Files
-
ac0e55df3c0e5afd5a7f98201640d337_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d8e9e06f8e51550e3e5089179e9846d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sections
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 47KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE