Static task
static1
Behavioral task
behavioral1
Sample
22ec713eea881dcacf12abde8c1facd2_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
22ec713eea881dcacf12abde8c1facd2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
22ec713eea881dcacf12abde8c1facd2_JaffaCakes118
-
Size
45KB
-
MD5
22ec713eea881dcacf12abde8c1facd2
-
SHA1
362305434bb600b56e3eb65af319870685e2fd23
-
SHA256
f624c0c2e7131fa9a9b207a6e865b499f3a2c98b4bedd8c45036d93a8f2052a4
-
SHA512
c7187d0fd70142f638c9947709557f6c804fc681f40bb78e146689db28ba91a1f59a31c25e8fd19cd651f239a6b489c757219fc535a3602ea82df6087481dec4
-
SSDEEP
768:1hXsWnz5bu8Zhj71vCzSBmLJXR002jt5Y029tzePAvTHkLFv+QO1:znYCtB0BGh29tzeovwx+x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22ec713eea881dcacf12abde8c1facd2_JaffaCakes118
Files
-
22ec713eea881dcacf12abde8c1facd2_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 35KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE