Static task
static1
Behavioral task
behavioral1
Sample
4895bee9e546d2ff52cdaeefeb2dfba1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4895bee9e546d2ff52cdaeefeb2dfba1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4895bee9e546d2ff52cdaeefeb2dfba1_JaffaCakes118
-
Size
64KB
-
MD5
4895bee9e546d2ff52cdaeefeb2dfba1
-
SHA1
f074ef98e640abf6783aab5160f6565f1d3bd43e
-
SHA256
45e1b1ce8c1867e94b660edd21b27d7ae28ab7ffb469a528a6435455a51a4186
-
SHA512
aa0f59faf01a53f2db4fccfdd27445f2d3de69d4c1919d07bf5709382d5ebc828d5d4b857d9e7eebe32b030b65cbca780d08c92f443db5aa98877520b8028bcb
-
SSDEEP
1536:LKZiivgFkwb9nG3mlCaHLWX1TDZL5sjGZ6Wj7TkWsq7ZzBFLWp+K:wvcTZltLWX1TDVCyZ6WXwWfRe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4895bee9e546d2ff52cdaeefeb2dfba1_JaffaCakes118
Files
-
4895bee9e546d2ff52cdaeefeb2dfba1_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 44KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE