Static task
static1
Behavioral task
behavioral1
Sample
296a674ca0ee287cad8de88a25009d67_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
296a674ca0ee287cad8de88a25009d67_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
296a674ca0ee287cad8de88a25009d67_JaffaCakes118
-
Size
70KB
-
MD5
296a674ca0ee287cad8de88a25009d67
-
SHA1
d0678c1d029a2a60c630c2b1735deb33bc42c986
-
SHA256
03b19e33b6a3825de296b3e1b2b781200b9b21bc36f03cd520c6a34d0b251462
-
SHA512
6512d1724adea379861c76e85a4297407444960380d04701ef8d087d3a07b7e6d80814e5c82d215d214379ba31b80dc59fe80fca4c22f0df004e5ec1dd81078e
-
SSDEEP
1536:+r0DTbI+xS/A2MyrO24UcUUknJcMwVq1/2GRtAvhxu/FQ1AVdF25u:+r0DwgSoXy6oUjq1ZCgF25u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 296a674ca0ee287cad8de88a25009d67_JaffaCakes118
Files
-
296a674ca0ee287cad8de88a25009d67_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 65KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE