Static task
static1
Behavioral task
behavioral1
Sample
d0e5f504f002d04637e8e6fa17fdd7ae_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d0e5f504f002d04637e8e6fa17fdd7ae_JaffaCakes118
-
Size
243KB
-
MD5
d0e5f504f002d04637e8e6fa17fdd7ae
-
SHA1
03f9311aa483f6493ac516c9831542afe19121ad
-
SHA256
a20cd125cec04c0ffeb9da6d78f90ba75a1d45711af3fcfb3264e561fa403453
-
SHA512
44cff821441264d6ff087fc10c6a2085bdf0b694b3d78dbe72d066029435916764c12b4f8d2c4c90f72690bb18f0448ae2acd14b2774a7c37a5637f076959700
-
SSDEEP
6144:tbP6/2eVu2ci/p9LbYzPhKhKXHWxGadu0LgXBM0I5:NPo2B2jB5YzJXHWx9j0I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0e5f504f002d04637e8e6fa17fdd7ae_JaffaCakes118
Files
-
d0e5f504f002d04637e8e6fa17fdd7ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
2373d48743f024d61c0919c33d623aee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
strncmp
ws2_32
closesocket
oleaut32
VariantChangeTypeEx
Sections
Size: 236KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE