Static task
static1
Behavioral task
behavioral1
Sample
1aa2509cff315c105be693347dc06f37_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1aa2509cff315c105be693347dc06f37_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1aa2509cff315c105be693347dc06f37_JaffaCakes118
-
Size
36KB
-
MD5
1aa2509cff315c105be693347dc06f37
-
SHA1
a3ce2973905fe786a550b1496a447bf6fb8c31f3
-
SHA256
d22f06d5e699d41c367839d4e478318b950875e169cbfa77e4f1046111a66cde
-
SHA512
50a1f0f971f1c3e6af7e4c0f015021b60ff7b555b1e061d4e9162a5b87c9cdbd9f3e6a2b6859984783bc6fff70ff22f76e21669f43b3e08c2b33a2ec66c2ee87
-
SSDEEP
768:is+13ocoyfkfkzobiriw8MCyJ5HEiA53KWhalaMNXjccj9VfgM:is+Na9wAyJ5iBKNlaMZB9VfgM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1aa2509cff315c105be693347dc06f37_JaffaCakes118
Files
-
1aa2509cff315c105be693347dc06f37_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 31KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE