Static task
static1
Behavioral task
behavioral1
Sample
0f0248477d1db5a7f423d08d4b3b34f6_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0f0248477d1db5a7f423d08d4b3b34f6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f0248477d1db5a7f423d08d4b3b34f6_JaffaCakes118
-
Size
74KB
-
MD5
0f0248477d1db5a7f423d08d4b3b34f6
-
SHA1
8b1f2b48bc665f215183a218c1e73e07a8fd9966
-
SHA256
b7becb4af3579fb80ecceeecb2fa91cbf449ac08e8daed40b488a4f3c08cedaf
-
SHA512
dd718fd3592934e125fc4b3679ca83536031b8f7a8fad16bb8cbcf7100f6693d788612617e8dd8c1503aec78f553352d503e5f95ba66bd8d67e95becd9dec188
-
SSDEEP
1536:PpeGYbmuaka3H0/sVJsyBgiXYuieehkp2KdNlpQquU+v:8bmSaasrjBT0Kcbv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f0248477d1db5a7f423d08d4b3b34f6_JaffaCakes118
Files
-
0f0248477d1db5a7f423d08d4b3b34f6_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 64KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE