Static task
static1
Behavioral task
behavioral1
Sample
d5601d87e1e5a9162d4a649fa9496537_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d5601d87e1e5a9162d4a649fa9496537_JaffaCakes118
-
Size
14KB
-
MD5
d5601d87e1e5a9162d4a649fa9496537
-
SHA1
435ca6bbd3b77484eadf418f9d757fdef32b8525
-
SHA256
373a14eea978baaeb96018ffae39db83aef78a206a5d53225a0d75edd874aa1c
-
SHA512
3a53689918f0d6e6c54aeb50d1227db885b3422625762e2105e3f3d2bfa0b9fdee694fc1b1df196983a1062ee3a3c43f76be0ec0e8d4f32779e27b8e76f99d9c
-
SSDEEP
384:GB1TR8GKug9PBaqCNsF6kUfzdJT69V8cZn9KH6J:6eGXgSqCDfD6+aJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5601d87e1e5a9162d4a649fa9496537_JaffaCakes118
Files
-
d5601d87e1e5a9162d4a649fa9496537_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 13KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE