Static task
static1
Behavioral task
behavioral1
Sample
f9efb40442578cd5246c10f393eb663a_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
f9efb40442578cd5246c10f393eb663a_JaffaCakes118
-
Size
15KB
-
MD5
f9efb40442578cd5246c10f393eb663a
-
SHA1
da079ddb89dfae536e3415b5fe0581814b9f2216
-
SHA256
9efc03db808847873a29202965ae19ea04ff74bebcddd4776db74c107999bde0
-
SHA512
b0fc1ec2dcafde4cd83e81fdc6b6f7eac21c41d9748928903f1d2152aa969c1b3b9616036aa90a3973abaccf7992661efc4bd407aa38e780332a27b1035cdfe6
-
SSDEEP
192:5kspsAMKf+gk/rnvnB2zH6Sqr7FJHTjJmE4+zGHHyTHTQtYL97RFj8/lcIVI2T/+:iLtgIvB276L7H9fG6TQtYHVYZLbF459
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9efb40442578cd5246c10f393eb663a_JaffaCakes118
Files
-
f9efb40442578cd5246c10f393eb663a_JaffaCakes118.exe windows:4 windows x86 arch:x86
807d4dbf88522aca43243ab895fbef96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32.dll.
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
Sections
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE