Static task
static1
Behavioral task
behavioral1
Sample
e785ce1b7da8a1c8136f3f16406497a8_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e785ce1b7da8a1c8136f3f16406497a8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e785ce1b7da8a1c8136f3f16406497a8_JaffaCakes118
-
Size
372KB
-
MD5
e785ce1b7da8a1c8136f3f16406497a8
-
SHA1
8d3fa5d067d87fca571d4d100e5cc4dd92a61f86
-
SHA256
6920e9a699ae06200b08aa847633bac73e1a31baf7173e8f83ea425fc2e61618
-
SHA512
593a72382af30f4bcd740b9e9537176a8e9cc89f09e533fea0adb4efd148e475767b1436cb6a4d0df72f8892f4b350f1447b133dfd96359df2ae4a57880c9c0d
-
SSDEEP
6144:6YEoo/4rnzsBw+EwKEnePrNqhdFvmNpqB/A8/QJQCe2zdRQ0yhmcvZpIwVf:6uHrcYPkePhqpvmaBvYJQCe2I9fn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e785ce1b7da8a1c8136f3f16406497a8_JaffaCakes118
Files
-
e785ce1b7da8a1c8136f3f16406497a8_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 361KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE