Static task
static1
Behavioral task
behavioral1
Sample
bc842486161b1448082356d28fee0d2f_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
bc842486161b1448082356d28fee0d2f_JaffaCakes118
-
Size
47KB
-
MD5
bc842486161b1448082356d28fee0d2f
-
SHA1
9705ff404b638e6777d20c6ccff1f79213608199
-
SHA256
2d490f39b6c47f4da5a57a764f843d3ea7a65a41bc09b9c13fcd2a11d082534d
-
SHA512
f771118e4896c46adf50902e8562953daadd6493c0e7040cbbe6e0da19ca0c936a975066a9b7527570b3085c0a8e301d994a6003d581b2b02f8a17a223eabc11
-
SSDEEP
768:ohScRvs7PsQipx2gL7me5WlGFjxVFxPMgl5Y6X1XwksmTFi5WOjj3cVc:o5ZePsQUx2igMLVzPtnxy5jj4c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc842486161b1448082356d28fee0d2f_JaffaCakes118
Files
-
bc842486161b1448082356d28fee0d2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
e58ab46f2a279ded0846d81bf0fa21f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
Sections
.text Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE