Static task
static1
Behavioral task
behavioral1
Sample
c8aaa533ef69442b6bc4914fe84084b9_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
c8aaa533ef69442b6bc4914fe84084b9_JaffaCakes118
-
Size
30KB
-
MD5
c8aaa533ef69442b6bc4914fe84084b9
-
SHA1
c8113b435570061beb9a62a8cbd7687f2898af0c
-
SHA256
97c17c88baa337c22a9fcd6f2ba4edd4470b16d2443bcdd96ab110fb3437e486
-
SHA512
f3eec9e2087fc94d4db6204e2c6528a969e04b1317c375fe36ab7193c3919c49f47cf9030741148460d1f815f006e450744cca5d8a4949cbe46608929d20b379
-
SSDEEP
768:2Klj163cvs7F+jrZphn27OvhiSlgE7PFJTtf27aMkQSP460j8:ZljS8eF+9/n2KvcqgE7P5F94/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8aaa533ef69442b6bc4914fe84084b9_JaffaCakes118
Files
-
c8aaa533ef69442b6bc4914fe84084b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
807d4dbf88522aca43243ab895fbef96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32.dll.
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
Sections
.text Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE