Static task
static1
Behavioral task
behavioral1
Sample
b596d8f05699a99e8f790db7d02bb161_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
b596d8f05699a99e8f790db7d02bb161_JaffaCakes118
-
Size
563KB
-
MD5
b596d8f05699a99e8f790db7d02bb161
-
SHA1
c194e0c6cf01f35c9fe59a99b9030f3aa7c4527d
-
SHA256
c8e88cf738047f463b4ee1a64cf51eca413a8eec4e12666655e6d2b52310c282
-
SHA512
370f9a68fbb999330b3d1a0db45a30e87a50ba33576c12aaa3040177bd2b358ac500a7bb050071a18f7c4c850be79fe0c18f5af58ba61997b72a489cc125cb20
-
SSDEEP
12288:aqeg1IuLScbrdmDv8SutH9vdw062v1PSeF7UJjzu77A9mPE64CYZjKxvkJuC2SxN:feJuLScbr6v8dH91O2v1PFF7UJXA7A9T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b596d8f05699a99e8f790db7d02bb161_JaffaCakes118
Files
-
b596d8f05699a99e8f790db7d02bb161_JaffaCakes118.exe windows:4 windows x86 arch:x86
aa77d18b40072a7e1dc36630aafffd27
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualProtect
Sections
.explow0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.explowe Size: 557KB - Virtual size: 557KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE