Static task
static1
Behavioral task
behavioral1
Sample
adaf34200405f9f4ef4db66dedd4ace8_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
adaf34200405f9f4ef4db66dedd4ace8_JaffaCakes118
-
Size
720KB
-
MD5
adaf34200405f9f4ef4db66dedd4ace8
-
SHA1
8bb2fb5eb4dd30348c8d1bb7e8118a8eb05caec8
-
SHA256
5c4d107071e20bbf4fe9d86870c99ba8d4689dd03bbce6b077db07c4d75c20f0
-
SHA512
56e9e2b981d814c9aa01400e9ceb4b546ac0c01730566abe00f81ef2f274a74ee4e361a0e35f6bf74df8c0c2f8bf8399ac4088a8e7c6fedc2505d7148e0f52d2
-
SSDEEP
12288:ByDsgpv94AADmHE0MuWDm9KhsFofbZALAkIk8OkrAT9StKUU8s+gEGRggnwtF5f3:yB4sMFm9wsFUOcPg4KUU8s+gEG6pzJsU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adaf34200405f9f4ef4db66dedd4ace8_JaffaCakes118
Files
-
adaf34200405f9f4ef4db66dedd4ace8_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 35KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE