Static task
static1
Behavioral task
behavioral1
Sample
dbcbaf2e28fdbccb2d9861f39ddc588f_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
dbcbaf2e28fdbccb2d9861f39ddc588f_JaffaCakes118
-
Size
99KB
-
MD5
dbcbaf2e28fdbccb2d9861f39ddc588f
-
SHA1
bcd769e92b860018a7b56dd65c69017b95597ff9
-
SHA256
1bec360fa6eef3795917ff3ed38ac04622e211139dcd8faf1b26d44dbf08b0f0
-
SHA512
b43ea7eac9fc0e42cc0476888a6d0ebadfbf4607a7847d7ce7f764f35aaaf20ef083f1bf981cd6cb4b726396f75ad227cadd12140783e3aec4319eccbd5532f7
-
SSDEEP
1536:SlvKjw2WFe5jyKvJ9R8jjlOyYBibL1iiizASp36L+ZpDohzDUcxX3upS9bOgD6:SlV2WFCRuHlOuki6ASp3vgUnpS/D6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbcbaf2e28fdbccb2d9861f39ddc588f_JaffaCakes118
Files
-
dbcbaf2e28fdbccb2d9861f39ddc588f_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
0 Size: 95KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE