Static task
static1
Behavioral task
behavioral1
Sample
535fc1b9a3663a46cd8cf10f3a343c9b_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
535fc1b9a3663a46cd8cf10f3a343c9b_JaffaCakes118
-
Size
1.4MB
-
MD5
535fc1b9a3663a46cd8cf10f3a343c9b
-
SHA1
ed4830af5ddd671e71cd7b6368e9d4b20ec45ee5
-
SHA256
258357fb3dab74c7e361a48ca1dbea5e16ad86c1acb327edeb603a8b6c1b62c9
-
SHA512
1fa0f54d4031e974c39e474fc7358177b6fc2e2ea07d163bc263ce077c09bb4bdb1b97a30a20e795a58cea3ed012ac995224386f72dd499885c1ff87f46edde6
-
SSDEEP
24576:abtnEpY8CQde/yl9kcfwc64skLOnQwg7gwgjBujRB+pCu+oz+SrG5xfTlK:axf96lBfwc6nkLE076QjReCuLrG5xZK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 535fc1b9a3663a46cd8cf10f3a343c9b_JaffaCakes118
Files
-
535fc1b9a3663a46cd8cf10f3a343c9b_JaffaCakes118.exe windows:4 windows x86 arch:x86
67fdc237b514ec9fab9c4500917eb60f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
Sections
owswqgaw Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hqsfqavd Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
peiduchq Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
flpnsvmn Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE