Static task
static1
Behavioral task
behavioral1
Sample
b305167a80a8245ecf2b6f98f1152d09_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
b305167a80a8245ecf2b6f98f1152d09_JaffaCakes118
-
Size
314KB
-
MD5
b305167a80a8245ecf2b6f98f1152d09
-
SHA1
d47624b7f8e0b8a05cc03f994398037d0936dbd9
-
SHA256
828ec49f5838e21816a5eae377e732a46fa9c8fb3cf6c3889e27a9b6e428d1be
-
SHA512
f4375035da2a50510be41e8388ecdc3479d8f65b4e7e4cd6237c2ffaca349470b8ba15cc7913d53db8b1df11bdc7e1b9ed225145ea8f36173d48ee46c5ecbf53
-
SSDEEP
6144:9i+L6t2+0/tDMtRASPEZJG+K+/4CQF0rKhkGSPCh/XtPx3uDtfeh4AYFY:A+etztRAS8ZJpQF0rKCOtPx3uD0iAY+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b305167a80a8245ecf2b6f98f1152d09_JaffaCakes118
Files
-
b305167a80a8245ecf2b6f98f1152d09_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 26KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE