Static task
static1
Behavioral task
behavioral1
Sample
8480d345fa06a933be95c8cc11a89fdc_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8480d345fa06a933be95c8cc11a89fdc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8480d345fa06a933be95c8cc11a89fdc_JaffaCakes118
-
Size
1.1MB
-
MD5
8480d345fa06a933be95c8cc11a89fdc
-
SHA1
d7a874ab9cae03a445525fe5e32262e1b92855d9
-
SHA256
e52aa82ba3c1e16f2eced508187f738bd4ae0f83f16b58224a36ab1a04848c04
-
SHA512
13bf37e5859a410748749177b694097a71747f4c0ad965173b991ea31de87d7fd19d7f6d4514bc5cd4ba0a92df72233d72d0289ce9545f57e894dc0ad73b623d
-
SSDEEP
24576:L3RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV:LV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8480d345fa06a933be95c8cc11a89fdc_JaffaCakes118
Files
-
8480d345fa06a933be95c8cc11a89fdc_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 31KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE