Static task
static1
Behavioral task
behavioral1
Sample
cfcbec9eab86e6f98e686f7a118c3b30_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cfcbec9eab86e6f98e686f7a118c3b30_JaffaCakes118
-
Size
23KB
-
MD5
cfcbec9eab86e6f98e686f7a118c3b30
-
SHA1
100f51b4b77a344dfe124e0a62454ba22d4fa8c4
-
SHA256
bb63759638c4335600f052ecba7cb276e3a279b12621799fff4ed81e44344b79
-
SHA512
598aa1287b5b93366f7ff07e7f7adaf1a9207fc31990b1b973dda29cc73d4de02a5b6c2e1827bbd3aade7ef380705e2fac4909efef725653fcd39dd6d98613a2
-
SSDEEP
384:ZqR/3dWKy2eQLxVnezTjpR645Ukjyqt/WrEyfZz+LE/TW6D7vgNq358doXNtqg93:aWK77LxV8TNR6GUkOqvyt9bW0vg43Bdd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfcbec9eab86e6f98e686f7a118c3b30_JaffaCakes118
Files
-
cfcbec9eab86e6f98e686f7a118c3b30_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 19KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ShenLan Size: 93B - Virtual size: 93B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE