C:\Hello\Insert\Data\File.exe
Static task
static1
Behavioral task
behavioral1
Sample
0e8352ac8ba2fbc7c14313075deecfa5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0e8352ac8ba2fbc7c14313075deecfa5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0e8352ac8ba2fbc7c14313075deecfa5_JaffaCakes118
-
Size
192KB
-
MD5
0e8352ac8ba2fbc7c14313075deecfa5
-
SHA1
acffaf8345b156049d60268fb5f65c7cb3ae2a84
-
SHA256
adf523b9cd5c3860f2330421d0b32c57fbcf093aed973891885515843c2bdfcd
-
SHA512
4a8984638fafc3e512196bd5487127bcd53d9f11461d77321bb44c26d5e587244ccd850923520c685f726333ec5be9465d54822a257757802ae432d3ef7318d7
-
SSDEEP
3072:J6KfFtywCxEwgjQZvR7TFXN9ZbdBhZbY5HFnX8Qj7Sclh3QNWilz3f+jD8+rcqXV:J/fwhZjXN9ZbdnZSnfQNzzPKDjQqXMNg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e8352ac8ba2fbc7c14313075deecfa5_JaffaCakes118
Files
-
0e8352ac8ba2fbc7c14313075deecfa5_JaffaCakes118.exe windows:5 windows x86 arch:x86
91d2231f3a2d70c76f9f5763c35168ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
HeapWalk
OpenFile
CreateFileA
IsBadCodePtr
DeviceIoControl
ClearCommBreak
LoadLibraryA
EnumResourceTypesA
FindClose
GetComputerNameExW
GlobalReAlloc
GetComputerNameW
GetCommProperties
Sections
.text Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ