Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6d8926898f239ca5bb3314a9bcc4113b.exe
Resource
win7-20241023-en
General
-
Target
JaffaCakes118_6d8926898f239ca5bb3314a9bcc4113b
-
Size
230KB
-
MD5
6d8926898f239ca5bb3314a9bcc4113b
-
SHA1
2b7150a480ef30e2ed0eb43039cf87b30b54c4e6
-
SHA256
0f003fdf870c987e3a15a1761b00145f5259136cb7b741714a3422644c2c2de1
-
SHA512
34eefaea972406f0aedad8c6886a3503d6eeac2905149be187117e11753f3a205f3dc1c8e56ad290c1618b5ea0cfbb8eae08169e1c1a63052372e56aec06b203
-
SSDEEP
3072:nLJli69CXY8Q0Z5LReCnAKKvM/gEG8/r4gwL/ea+BaZ2odFadrKj3OJce:LJlnsLReCn3KvM4EGE6L/e1acodFYUO5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_6d8926898f239ca5bb3314a9bcc4113b
Files
-
JaffaCakes118_6d8926898f239ca5bb3314a9bcc4113b.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
0 Size: - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 147KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE