Static task
static1
Behavioral task
behavioral1
Sample
75138dcd003da605a9037c71edea097b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
75138dcd003da605a9037c71edea097b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75138dcd003da605a9037c71edea097b_JaffaCakes118
-
Size
322KB
-
MD5
75138dcd003da605a9037c71edea097b
-
SHA1
efd488a5e538b64f05944bf14da2f6d76793e429
-
SHA256
adb2761bc2e29f6d9f6cd4fbd6820002ba67babc901a1d206865711b82f05252
-
SHA512
dbd62b5262f504aa98fbb5271b2b6895c7f4f11bc612d86f0c04611d0a1574528b219166b58557a77d024df2008172e14514605a7e6ee885c5b2a1c42d0faaba
-
SSDEEP
6144:zVHd4vO3qcJ5zK2zbMPFTHbsRdvUo+qQDLghhDqB9:BuvOUgbM9T70pUoGng369
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75138dcd003da605a9037c71edea097b_JaffaCakes118
Files
-
75138dcd003da605a9037c71edea097b_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 212KB - Virtual size: 452KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE