Static task
static1
Behavioral task
behavioral1
Sample
866ec13be1fff8ce81046c05caaf6459_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
866ec13be1fff8ce81046c05caaf6459_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
866ec13be1fff8ce81046c05caaf6459_JaffaCakes118
-
Size
136KB
-
MD5
866ec13be1fff8ce81046c05caaf6459
-
SHA1
e74b04720d7bd2baf03013ef51e42bb238924899
-
SHA256
1edfdf50fbf0d56670594ae0bcd945d643c5050a5cdd2be57ea2ba51617468b3
-
SHA512
1a08d12beb97abfe24b58f7c2a3ae6dfb5ce287d4bb5b928b0082de689ee07cf4724538e39d0553f1cd0a7ce5c923c4f468061554b1114fd9feea7b2d57e1975
-
SSDEEP
3072:IaLeF/cZp9mnOJKCDPuQDGczcchOqv1vypJdpq38BM+NRB:RLeFAp9CxCPLGHccqv5y5DR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 866ec13be1fff8ce81046c05caaf6459_JaffaCakes118
Files
-
866ec13be1fff8ce81046c05caaf6459_JaffaCakes118.exe windows:4 windows x86 arch:x86
69848ba2fad42e9c181ad1835b41eae0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetProcAddress
GetModuleHandleA
GetCurrentProcess
Sections
.text Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ