Static task
static1
Behavioral task
behavioral1
Sample
29343307bb5a9a36a94263ca468af818_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29343307bb5a9a36a94263ca468af818_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29343307bb5a9a36a94263ca468af818_JaffaCakes118
-
Size
57KB
-
MD5
29343307bb5a9a36a94263ca468af818
-
SHA1
91bb163f6677a5ed0b97019af8eae2a5cfa7f0a2
-
SHA256
4b88e2e89c668106505ffbecac9a0bf31e247af9eb18e3b0347c28d394937ceb
-
SHA512
4ea9ee64363d06e4bb8362cbe1806e9e53a472bc1ec1f2de885866544df62b41a538e7aba4fd3e39b1e09fd858022e1b74a998a794b9fe1e146ab68fd9d2ddd0
-
SSDEEP
1536:OaLphh4px/GaOsXDp1CbVZn+K5mayAMIl:OIphho/1OOTNSl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29343307bb5a9a36a94263ca468af818_JaffaCakes118
Files
-
29343307bb5a9a36a94263ca468af818_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 47KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE