Static task
static1
Behavioral task
behavioral1
Sample
db17fa5011d1f4949b226eb187dca5e6_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
db17fa5011d1f4949b226eb187dca5e6_JaffaCakes118
-
Size
16KB
-
MD5
db17fa5011d1f4949b226eb187dca5e6
-
SHA1
1f16ec1439c8e567f7b8c7f4cb038e282b0d7bfc
-
SHA256
f0b3ec871411809e071aa5701ecd7159b6d5945fb7a3086a81fdb7426ad184a0
-
SHA512
1d479aa5b8952f6abba20229af29ddd5ac73324e8337206bf59667475cc87897c418e13cf35f4c59c37f2ffc8f7c49811d28c98a9d31d35034a4647f0c4a92b0
-
SSDEEP
384:bx8HcIvB27IxLa/JrFupsSuI13iOEICN2MTC0TUiexgK:WTvs7nPIIOniUiex
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db17fa5011d1f4949b226eb187dca5e6_JaffaCakes118
Files
-
db17fa5011d1f4949b226eb187dca5e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
807d4dbf88522aca43243ab895fbef96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32.dll.
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
Sections
.text Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE