Static task
static1
Behavioral task
behavioral1
Sample
488dc61d7fc8d3f447da041e5b6290c3_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
488dc61d7fc8d3f447da041e5b6290c3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
488dc61d7fc8d3f447da041e5b6290c3_JaffaCakes118
-
Size
84KB
-
MD5
488dc61d7fc8d3f447da041e5b6290c3
-
SHA1
dc38799ec1b44f6933bc678bd32025b24c2d1f82
-
SHA256
b5a02a1515ce73aaa1d0ed3482034bd88d652c90003b1521f99e2fff3becf003
-
SHA512
0d2a020f8480a2170b17539387a7139f097cae10a0b1c7ec8ae9dc39dbb250f28504e1c1615a5ecf3d8f64c7857b7c71392260e0cf0bf3b0d83d6a951210ded9
-
SSDEEP
1536:AIdlDrcHwvwlWLxHdN3/Bqz8QvsqjBs2HRNwoPMW9:AIzr2769NYzh99sEtPMW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 488dc61d7fc8d3f447da041e5b6290c3_JaffaCakes118
Files
-
488dc61d7fc8d3f447da041e5b6290c3_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 65KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE