Static task
static1
Behavioral task
behavioral1
Sample
073798c459db8b4aee4fdaf16f115151_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
073798c459db8b4aee4fdaf16f115151_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
073798c459db8b4aee4fdaf16f115151_JaffaCakes118
-
Size
291KB
-
MD5
073798c459db8b4aee4fdaf16f115151
-
SHA1
84907e14a547717d451587922e1543e688bf8d83
-
SHA256
ef5b7d74d1fed4a70bf39f8576664a42d545ad422971c0ce2692b8569c444778
-
SHA512
0650a0883f091474eca59aee24c940935c69afec13aeb882272bbca69382cb1188c605562f26f00b4342e2b17bf182fd5fda0e5e469336c84b671293d296f193
-
SSDEEP
6144:4p2qm4uyX++8DKNT3gQI1C43WnaJF19eAyFHQUYJUcz7n/p+p:4Al4uO8DKNbgw4GnaJtejFHL7cz7/Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 073798c459db8b4aee4fdaf16f115151_JaffaCakes118
Files
-
073798c459db8b4aee4fdaf16f115151_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 229KB - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE