Static task
static1
Behavioral task
behavioral1
Sample
2246179f9f05efd488b846c51d4d4858_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2246179f9f05efd488b846c51d4d4858_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2246179f9f05efd488b846c51d4d4858_JaffaCakes118
-
Size
84KB
-
MD5
2246179f9f05efd488b846c51d4d4858
-
SHA1
e437f9d2fbd5242f6f5615a5fa0c090caaae6228
-
SHA256
c09276910052d80dcd7dca1ac6945215960b9f0acdd016a67a4dcf497161e307
-
SHA512
62ab42e6e2f9b1adfd1f5bba984de75d0535bc17a6b1244e65a5942dba62e7e5d58fad1f4e17a2ff37bba6498d591d53b437c77b86b674418a64914b8544575c
-
SSDEEP
1536:qUBCVCilCsiPLIF5C7WLoFSurN6b4PFweJHwt3S/Bd9x57N89h0ePt+2:qUBCCil7CaMWLokHMPy3+Nw/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2246179f9f05efd488b846c51d4d4858_JaffaCakes118
Files
-
2246179f9f05efd488b846c51d4d4858_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 64KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE