Static task
static1
Behavioral task
behavioral1
Sample
67ac29797aff3e72f6fce5e7dac7b651_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67ac29797aff3e72f6fce5e7dac7b651_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67ac29797aff3e72f6fce5e7dac7b651_JaffaCakes118
-
Size
132KB
-
MD5
67ac29797aff3e72f6fce5e7dac7b651
-
SHA1
d75c17e954e1bf837d3746b9700c10ad8a2b0eac
-
SHA256
2a933cf20e4f45182362db6fe4b4f7c239976539b929ef5289e7c3b29b8c0db2
-
SHA512
3d64017e07cc5cb9653ec3f349d1578a7a756fa241bc8e6c4f228d34890d1293c741016883743dc4a87d012df6feb06ce0b444edb96ec61ef6b48e53f4ee3911
-
SSDEEP
3072:VDpyY2E4QwIJVFMBixDHgYsPz8a1aUNB4KqcsNYFfP:VXrAk/HgYsLBamvuE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67ac29797aff3e72f6fce5e7dac7b651_JaffaCakes118
Files
-
67ac29797aff3e72f6fce5e7dac7b651_JaffaCakes118.exe windows:5 windows x86 arch:x86
7567bf6b221c53f847b9ad16470d282d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
ExitProcess
ReleaseSemaphore
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ