Static task
static1
Behavioral task
behavioral1
Sample
7461d9aefbe40f0464e11491ea726dd3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7461d9aefbe40f0464e11491ea726dd3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7461d9aefbe40f0464e11491ea726dd3_JaffaCakes118
-
Size
173KB
-
MD5
7461d9aefbe40f0464e11491ea726dd3
-
SHA1
05544328c6d54efec8e7e3ef7a3fb860decfccb3
-
SHA256
c2bba261cce988f48e3b023a50115af2d2b3b2e1ddfe428c38ef2879d8a71e8a
-
SHA512
376a56ed361e2b0338a6ce2b52472e7baa2c99cae5bed81ca70e82d62d945bbd0804750d2ce8792873606ad53e43ce161cc24c12a1739583ba979310df7e4189
-
SSDEEP
3072:Bbj0kGoRBeHUD4vDQ+Oy6yL8YRY7HXnlb4B/8k4PvaS+egSCHPG:Fj0kG6BeK4oy/L27d4Gn+eu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7461d9aefbe40f0464e11491ea726dd3_JaffaCakes118
Files
-
7461d9aefbe40f0464e11491ea726dd3_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 165KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE