Static task
static1
Behavioral task
behavioral1
Sample
f8524c535b6c6d4f17707b6f92880670_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f8524c535b6c6d4f17707b6f92880670_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f8524c535b6c6d4f17707b6f92880670_JaffaCakes118
-
Size
38KB
-
MD5
f8524c535b6c6d4f17707b6f92880670
-
SHA1
04541e765b00ba0b7b194f1e2736ed26fc68115c
-
SHA256
2295e33fac3fe32d842586944a77c6101a2cde8e8090003d8b1544ada30eeab1
-
SHA512
e63086076b2372594f645fc8ec457b3b72edc18dfb0469df250b122188cbc4214f4721f7aedfd36f8f6df480e171e51d36fb94b4c44eb9f0df586ce6c924b26c
-
SSDEEP
384:IgG0eJdUfZscpwN5oJtSrFmRW2YwPjrI+I4qjSc/47C46js5Ex7jg6SIHCB3DJei:I7yfZuNssrpckv4qj3rnggCzw93yBP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8524c535b6c6d4f17707b6f92880670_JaffaCakes118
Files
-
f8524c535b6c6d4f17707b6f92880670_JaffaCakes118.exe windows:5 windows x86 arch:x86
72385a557a38f80f59b692b31555af3e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetLastError
GetProcAddress
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ