Static task
static1
Behavioral task
behavioral1
Sample
4d80abb2975e464e2e0ef9e797c39c07_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d80abb2975e464e2e0ef9e797c39c07_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
4d80abb2975e464e2e0ef9e797c39c07_JaffaCakes118
-
Size
955KB
-
MD5
4d80abb2975e464e2e0ef9e797c39c07
-
SHA1
d182f90068c56f23f3039d8d439b874a7c87b8e2
-
SHA256
91d0c92061443c9671f19f429bcbd78575a8a03ca382d5b942d4eaec2245e65f
-
SHA512
c89117b691746f797261f01f0b560a9f0e7c170bc7efa56449971fac6af9fee7594a11a0d2dba152c6f7145dfe08c4449543dcb4e071b3b73a7380c33cd1f97d
-
SSDEEP
24576:1k8n4wKbu3VcZ9NRBHQaqs9YiYeH7gVeXNbU3k6Qa:pn4hbulSTHn9Ylq7g89I1X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d80abb2975e464e2e0ef9e797c39c07_JaffaCakes118
Files
-
4d80abb2975e464e2e0ef9e797c39c07_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.ReUnion Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 948KB - Virtual size: 8.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE