Static task
static1
Behavioral task
behavioral1
Sample
8327a926fc38538b584f4bfbfe5faec1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8327a926fc38538b584f4bfbfe5faec1_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
8327a926fc38538b584f4bfbfe5faec1_JaffaCakes118
-
Size
131KB
-
MD5
8327a926fc38538b584f4bfbfe5faec1
-
SHA1
33a68d1dfd3278105a3f37c62c70d8392410268d
-
SHA256
e68bba3fe740128f234d28a200fd5fa4afce0df65ec3b084519284012a38c99f
-
SHA512
fdbb0ffca68d528a157398317b5ce8d90d14cec3a6260212cd80056d314c154738093ffc8c8d43e2110a077378d3615dc35023b6c26ca2dd8ad2e0f1c8e77ea6
-
SSDEEP
3072:b0LlcdVNONlVQEJZ8P/Ym1UuEfHDOgbP6Xgi/FsNYFfP:b0ZcPNOhQEuY4TsjHGwhE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8327a926fc38538b584f4bfbfe5faec1_JaffaCakes118
Files
-
8327a926fc38538b584f4bfbfe5faec1_JaffaCakes118.exe windows:5 windows x86 arch:x86
8b9060c47f3ce891cd8e1b6a6f6e15d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
ExitProcess
LoadLibraryA
ReleaseSemaphore
VirtualAlloc
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ