Static task
static1
Behavioral task
behavioral1
Sample
153200b7f94cd8d43a69263e5fe1f4bc_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
153200b7f94cd8d43a69263e5fe1f4bc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
153200b7f94cd8d43a69263e5fe1f4bc_JaffaCakes118
-
Size
52KB
-
MD5
153200b7f94cd8d43a69263e5fe1f4bc
-
SHA1
f02ae183274c7421a33ff61e342e2c86121b55a2
-
SHA256
2fb0e413b11420bd731060429a5f972c257730098c69fc4a21001f61c5aeea11
-
SHA512
acc83b8416a40dcb0b7b4be87aa74433e161ce8ae57e4eb9f2de7ed12f30d973a467f09c2995d61e4a74fc1854380f2cced046aeda36e5f845fe8a5fda6698e9
-
SSDEEP
768:pS06kxM1B6/LQBdSg7jq581vH8mxP2zrVU4UKCnsrYj7I15WhOOpxm1/mp/XPxMO:t6kEMLQq58pz2/bUKCl7I2pxao/XmPm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 153200b7f94cd8d43a69263e5fe1f4bc_JaffaCakes118
Files
-
153200b7f94cd8d43a69263e5fe1f4bc_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
����oc Size: 47KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE