Static task
static1
Behavioral task
behavioral1
Sample
81cfcd7bc726dee28bc35a5da2d1a72a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
81cfcd7bc726dee28bc35a5da2d1a72a_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81cfcd7bc726dee28bc35a5da2d1a72a_JaffaCakes118
-
Size
1.6MB
-
MD5
81cfcd7bc726dee28bc35a5da2d1a72a
-
SHA1
fb43336ad43ae9dba8f5190568ae526775091924
-
SHA256
c1d0f273257e3d7b827e727c1c94254825062e73e9a0ce629ea005faea2d250d
-
SHA512
c4e7a815bd2c6c904497d9fc347cf4960672fc9d6d56b3ef36890e50eaabd6b37d51f78740de220640bb9c91ed90467e36b2e81715de0e74851e409a4ca9f580
-
SSDEEP
49152:wX3IrsQJWvy9eCdJYXSHMIBMM16hug+HQtB:mBwWQndIngMM1+uI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81cfcd7bc726dee28bc35a5da2d1a72a_JaffaCakes118
Files
-
81cfcd7bc726dee28bc35a5da2d1a72a_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 1.4MB - Virtual size: 28.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE