Static task
static1
Behavioral task
behavioral1
Sample
ce4e8d50e2425df40af6460218db0a30_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ce4e8d50e2425df40af6460218db0a30_JaffaCakes118
-
Size
793KB
-
MD5
ce4e8d50e2425df40af6460218db0a30
-
SHA1
6660104174cebf78fe9190ba666befc0efd2d7f2
-
SHA256
2fd3a307a64e452bd3ae18f6319dc4c1911a0f22243f327d0be5137ecbb5525d
-
SHA512
92d4d57b57f509180c1980f448be7eb5408b08dd6dcd5ccbe80809743c052de8853777c83fec8ed79062766bfc62afc566b8975ac03b23c5f11a138d12421f5f
-
SSDEEP
24576:r+q2hMD+bXDfrsVKxeDdFdZEcQf59ayOzJ2yG:rN2C+bXDzsVESVZwSzk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce4e8d50e2425df40af6460218db0a30_JaffaCakes118
Files
-
ce4e8d50e2425df40af6460218db0a30_JaffaCakes118.exe windows:4 windows x86 arch:x86
a53f732e1bbd70e2b3217e8d53ce6afb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
Sections
pec1 Size: 6KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pec Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE