Static task
static1
Behavioral task
behavioral1
Sample
e0dc9490b6e733e0fe3d117950460de4_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
e0dc9490b6e733e0fe3d117950460de4_JaffaCakes118
-
Size
20KB
-
MD5
e0dc9490b6e733e0fe3d117950460de4
-
SHA1
5fe50776c187dd0cd2cc71cb968c239e1f230279
-
SHA256
792bd76ffb0797217843ca30e6c73aa210869201c183edc62fa161b94359fe22
-
SHA512
9d961edeb5a4085d9fbead004c6339c0fd84c4073d1fc0605d2300a4a51bf39f1f721a1a6d12e50cffdd074081b2e1ec1161345610c963e05297b9eebb0ede45
-
SSDEEP
384:YrKTmGQTGYmprALt13Z0FXfC1X30YrxGx0Njx1K1ejQX6js2eYwrG7yGspV1:Y6mGQTSprALt13ZQQkAxGx11esNrG2j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0dc9490b6e733e0fe3d117950460de4_JaffaCakes118
Files
-
e0dc9490b6e733e0fe3d117950460de4_JaffaCakes118.exe windows:4 windows x86 arch:x86
119c7a0a8fc5eb9aacd5f16173d22e58
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetProcAddress
LoadLibraryA
GlobalAlloc
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 158B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE