Static task
static1
Behavioral task
behavioral1
Sample
ea4d1e3077da582fe25e32d6d9489c63_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ea4d1e3077da582fe25e32d6d9489c63_JaffaCakes118
-
Size
34KB
-
MD5
ea4d1e3077da582fe25e32d6d9489c63
-
SHA1
da5ff5323b17623de12c233b2089128020ed589d
-
SHA256
d827dbd67a21634e34c955564e1d654b8e7e2b4319530f0aef8b95be4d263b54
-
SHA512
60b4b9e57ee582b11d63052f9106a1a5bb242f0aa497c2babade9383326a2c19a711bc2b016d27b33e3fdc7a5c000360c9305f99064c36361a83733ff3b9ddb7
-
SSDEEP
768:3Vvs78H1+91lOoEn7FvMK+O/L40IuLOOsTVfvTEd1:3deK1+Lyxj4NYyTB01
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea4d1e3077da582fe25e32d6d9489c63_JaffaCakes118
Files
-
ea4d1e3077da582fe25e32d6d9489c63_JaffaCakes118.exe windows:4 windows x86 arch:x86
807d4dbf88522aca43243ab895fbef96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32.dll.
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
Sections
.text Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE