Static task
static1
Behavioral task
behavioral1
Sample
c0e46ba95c7a540fc90399d5f7d5173e_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c0e46ba95c7a540fc90399d5f7d5173e_JaffaCakes118
-
Size
23KB
-
MD5
c0e46ba95c7a540fc90399d5f7d5173e
-
SHA1
599abb74918a7304fed8fef47010dd17a6466ef9
-
SHA256
5cd6e47ca3b00bc01653e1faf0775c2449a94d50820316ced02f680b51a0e6da
-
SHA512
c4b63aaf0884dc540847381d985abf258f2170490d71525db07943708c312a9504e109e5a49a770774b62ec7a6b6aa28fb0b02297a5e8b2e4e1045701236b5ab
-
SSDEEP
384:QmcSp854Uo5dYY8BrgLnH9+hV7mPnKRTQuqOtgiF8b7snNUnvMNQjgku:Xu5Qdl8BMnH9gV7mlROttF8b7uN4ljgh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0e46ba95c7a540fc90399d5f7d5173e_JaffaCakes118
Files
-
c0e46ba95c7a540fc90399d5f7d5173e_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 19KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE