Static task
static1
Behavioral task
behavioral1
Sample
4662993ada3f539c6394b3247a13a0fe_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4662993ada3f539c6394b3247a13a0fe_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
4662993ada3f539c6394b3247a13a0fe_JaffaCakes118
-
Size
40KB
-
MD5
4662993ada3f539c6394b3247a13a0fe
-
SHA1
57c6093ce03c3c433a43f3420185508cf3684a78
-
SHA256
1787557a407d8d0af6f280d95c47f0ab48803170eaf43d65a3bd33e28e04fc6a
-
SHA512
4ede3e36a466ed741d6892f5cfb7c41b00639278e0dda3d010d61b1b293b529b70d83b5d488adbb018ee64001299fb0e9f7ebeb0d2edda4661bd43901fbbe2ff
-
SSDEEP
768:u71RkkHzKl3Is3dteTzQQD0Lgwu5gVFG+eyURNW5rt9BBM:uh/zW3d83N4s5gVFHeyUrGrjM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4662993ada3f539c6394b3247a13a0fe_JaffaCakes118
Files
-
4662993ada3f539c6394b3247a13a0fe_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 36KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE