Static task
static1
Behavioral task
behavioral1
Sample
2dcbdb308764d91bd8fe9d0a69ecaf76_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2dcbdb308764d91bd8fe9d0a69ecaf76_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2dcbdb308764d91bd8fe9d0a69ecaf76_JaffaCakes118
-
Size
44KB
-
MD5
2dcbdb308764d91bd8fe9d0a69ecaf76
-
SHA1
380548dabf3b6dc926dbbbf48d15e4087130c1f8
-
SHA256
41abc35c45f519beddba6411572d1cdfbf438543eef40bf4eb8dfb15f9966fb5
-
SHA512
2b92de1b239fb9e0aab84dc6169a338dc118c1efb75da828913b36f587251a2e45ad0546b69d50ee5a08d432dc0d6b9c0fcf70ecc825ede4508297561caf939f
-
SSDEEP
768:eBWxcvOG3IWVhPoEkNn7nQsTSlNrYh3pQMCRSsch1jeQVdgeyPz9ORvYGxGI1k9R:eBWxMvhtoEkNnD+YrYcJ8I+Pz9UYGx1D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dcbdb308764d91bd8fe9d0a69ecaf76_JaffaCakes118
Files
-
2dcbdb308764d91bd8fe9d0a69ecaf76_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 39KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE