Static task
static1
Behavioral task
behavioral1
Sample
dc6e549b38b02846cf3d4185853f5581_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
dc6e549b38b02846cf3d4185853f5581_JaffaCakes118
-
Size
257KB
-
MD5
dc6e549b38b02846cf3d4185853f5581
-
SHA1
90b50b4c8956669d6a62d1cce784f95bc5d3fb85
-
SHA256
335b0d083f7e8c4967dcb9108429ba68c34a58bbcb2ead1e4ca1f0de1e99ab84
-
SHA512
77acb1f57892df4858404e283af82f5cba39cc6ca7f197c74a7649d6888bf69247d4d35c54678bcf0c2af752954d9573e0f7bce9fe578c506e70b91c0e78a910
-
SSDEEP
6144:mvkZ/apiHNln9wm0gA0515OeYWtPfGIa1s0vHL:mkJPHN9f0gA0X0efd41sm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc6e549b38b02846cf3d4185853f5581_JaffaCakes118
Files
-
dc6e549b38b02846cf3d4185853f5581_JaffaCakes118.exe windows:4 windows x86 arch:x86
d825ed8944e7e111556149765a04aeef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
Sections
.ayag Size: - Virtual size: 300KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ayag Size: 253KB - Virtual size: 256KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE