Static task
static1
Behavioral task
behavioral1
Sample
5edfd7ca9d9335b87819af51f603c8d9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5edfd7ca9d9335b87819af51f603c8d9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5edfd7ca9d9335b87819af51f603c8d9_JaffaCakes118
-
Size
40KB
-
MD5
5edfd7ca9d9335b87819af51f603c8d9
-
SHA1
373d200cf78d10e5e015ac64dddbba7c7b47a919
-
SHA256
3f855e8bfe5b781e4deb88f5b579f4ef6c4f472e67c29c28deac3e150ff5399a
-
SHA512
10d89dd755dfb16f68cecd729a2f245abab90643ced5a1df44e744134eed66462a88d1133b3805f662dd07fea80725abc77d00efccb14bf7c98da7c57eedc90f
-
SSDEEP
768:MoMnCo5AoUFG0hOkH1G79eNDK1VHtJqe3x5MJzjhuKkW9T5SvhTij:BMT5AVFG/9t3l5M14KkWPuhuj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5edfd7ca9d9335b87819af51f603c8d9_JaffaCakes118
Files
-
5edfd7ca9d9335b87819af51f603c8d9_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 36KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE