Static task
static1
Behavioral task
behavioral1
Sample
0cd3c09bb3bc41f620d92adeb7cdc41b_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0cd3c09bb3bc41f620d92adeb7cdc41b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0cd3c09bb3bc41f620d92adeb7cdc41b_JaffaCakes118
-
Size
53KB
-
MD5
0cd3c09bb3bc41f620d92adeb7cdc41b
-
SHA1
8dd4091b3884522a9aff7cad1763fcb5dd5a9ef9
-
SHA256
b44e86d7448d0a99805ba651b771ab4f1a17bc96a43a572338dbc9fce8f9cbc0
-
SHA512
fa582b0a898c278b590e7d6c8747b5a0def745a289317effcc441a6ed8201d6c94076cf5a0eca8d5fc8609a9bf96d15b13b88e220be54ee6ec8527c82babb94c
-
SSDEEP
1536:TISmGg++0SDU3uS4O9TcfdCkycQ1bwbDgMf1GKn7gh7r:TIO+dDUeS92dvycyslNGyir
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cd3c09bb3bc41f620d92adeb7cdc41b_JaffaCakes118
Files
-
0cd3c09bb3bc41f620d92adeb7cdc41b_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
����ta Size: 48KB - Virtual size: 896KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE