Static task
static1
Behavioral task
behavioral1
Sample
b28e107a1162cdf3fc069c9b6d7f918d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
b28e107a1162cdf3fc069c9b6d7f918d_JaffaCakes118
-
Size
156KB
-
MD5
b28e107a1162cdf3fc069c9b6d7f918d
-
SHA1
54668cad9def565a009f3706285317cb8c575e76
-
SHA256
3c96e421d84fccc364a045412f7e8e49707c822aa888fdbbd00b39635ab7f493
-
SHA512
560ef905c254551083db6ae610c253736f4128584b5e0e15579481fb676a07d5966a9b794a6906053e0a8bb9960c1895b6b1b4e77d6c6136d1530d84f3086bb1
-
SSDEEP
3072:ClbvmDUgBmrh/nUb8oti1WsdggZtNs4IgSaTCdY/ytsKYbIaghc+:CFsPmd/UAotnrEtNaglTCdY/ytsKYbI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b28e107a1162cdf3fc069c9b6d7f918d_JaffaCakes118
Files
-
b28e107a1162cdf3fc069c9b6d7f918d_JaffaCakes118.exe windows:4 windows x86 arch:x86
a7333743ef063a68d1d860bbdf1c328e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualAlloc
Sections
Size: 74KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE