Static task
static1
Behavioral task
behavioral1
Sample
35888113a0b7837f723d093360f5267e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35888113a0b7837f723d093360f5267e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35888113a0b7837f723d093360f5267e_JaffaCakes118
-
Size
67KB
-
MD5
35888113a0b7837f723d093360f5267e
-
SHA1
fe42f8d7f0cb79c6429b8f7f7cb20b46020f4708
-
SHA256
7b6e3dc3707c9caec9fb8042a47178c55a0f03c13e0d087437f853102947657b
-
SHA512
2056fe92bbf11ef4c7a5ac8f2912bddbc189c70bcf728a1dcc08ba8906b95c9defb5ae2ad9366129b02155025b1f64ee1783b1076b3bfd89f170908812c72fba
-
SSDEEP
1536:W63OCY8TUg4XJwDJc/dx0P281bGa6bbIsLf6MLy6YQyZcHh2H0N7:zeCjTCJwDi30v1iaubB6MLy6/mU9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35888113a0b7837f723d093360f5267e_JaffaCakes118
Files
-
35888113a0b7837f723d093360f5267e_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 62KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE