Static task
static1
Behavioral task
behavioral1
Sample
df002e556aece11920cde3f7e7cb112b_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
df002e556aece11920cde3f7e7cb112b_JaffaCakes118
-
Size
336KB
-
MD5
df002e556aece11920cde3f7e7cb112b
-
SHA1
54367e99d2e08af2f6c5a6c3eb08532f3d09e8d4
-
SHA256
78764b1be72a82334f06946dfb0e6b834591c0e585f6c83787aaeefd4b8af54c
-
SHA512
b760d8a13b8a5d041c634041a8d961c1f8cb34de98819d92b9a1128ef981a527e1bf832e96e06811b839ec21423e06c04b892117ef458b7c19b53fef3c96c8b5
-
SSDEEP
6144:PzCYvnJC1idbeY+rhNRSL6LP+kI0NV2B8pOnbBkH6ZyhY1VBdivJEwVXzK:PfvJC1qbah7SMGkI0DPObB6Myhsrih0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df002e556aece11920cde3f7e7cb112b_JaffaCakes118
Files
-
df002e556aece11920cde3f7e7cb112b_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 46KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE