Static task
static1
Behavioral task
behavioral1
Sample
84491bb5d0bd3722017ae8f196731e4c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
84491bb5d0bd3722017ae8f196731e4c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
84491bb5d0bd3722017ae8f196731e4c_JaffaCakes118
-
Size
57KB
-
MD5
84491bb5d0bd3722017ae8f196731e4c
-
SHA1
e19a8768ecc18bdd174905b9270bc0bc18e974db
-
SHA256
1c2ab4cefabf8bfc26ddd4a4f0ee8a6ef114012498a949ef5af4cd3773eba9f4
-
SHA512
c8b20522a6e135387a1a7a25cf571761d2557eb3d88564bc43383a0ef58d4de013c0fec859c013a8efe870e0189757bbb0bdd1bba8418789c30844ee81d9bf5b
-
SSDEEP
768:AEBt4mR/01IyzJAFdmvNTYeEK176nZZihk1DC+TEAzlOuYlHEj:A+4mR/01IpFANTJ1mn/fIAz4HEj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84491bb5d0bd3722017ae8f196731e4c_JaffaCakes118
Files
-
84491bb5d0bd3722017ae8f196731e4c_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 47KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE