Behavioral task
behavioral1
Sample
b71321373bc822e10f07d30a2bd3b804_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b71321373bc822e10f07d30a2bd3b804_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b71321373bc822e10f07d30a2bd3b804_JaffaCakes118
-
Size
8KB
-
MD5
b71321373bc822e10f07d30a2bd3b804
-
SHA1
80a67227a31d7cca5967218c5e0abeb86cfc1e03
-
SHA256
4d8a9129e678b12185488be4a8718491a6230a9a97dc8c041e93954307f8a584
-
SHA512
3f857a31e4b53c27b1a63ca6347c730285203b42c1d43f26d63ed182209d89d484f4c537d9c34ac3a37a45421f22d516d29de2387e836a1fd5eefc7363d6bcf4
-
SSDEEP
96:4MSBvboD+bTL7tRmUkbRh4Xplf92JYg/49/TU23FSVu+SaZiGkk:4MSZRTL7GUA6XpHgA/TP38Vu+VoRk
Malware Config
Extracted
metasploit
encoder/call4_dword_xor
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b71321373bc822e10f07d30a2bd3b804_JaffaCakes118
Files
-
b71321373bc822e10f07d30a2bd3b804_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE