Static task
static1
Behavioral task
behavioral1
Sample
872a2c7edbb29d00e46661a1290d6a47_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
872a2c7edbb29d00e46661a1290d6a47_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
872a2c7edbb29d00e46661a1290d6a47_JaffaCakes118
-
Size
33KB
-
MD5
872a2c7edbb29d00e46661a1290d6a47
-
SHA1
2927704744053b3be86fa995f93b7265a3184caf
-
SHA256
072644898b72efdcf874c1aef0cfc57a94aabaee9405f0699e0bafde17465114
-
SHA512
7fb1671ff6d7ff7f81ef2ef212ce4f6e2b203965dd9fe8f87019ac549a16eeeb7b1d0caa536055e3ac96694c6a6b10a6417c7defb6bdcfdd38d36271b95faac3
-
SSDEEP
384:0+Zc3OM/l/yjVCBr9sYrYgIHsNiAIeLViXS1f4lrRpCkdKnOMAkMNek+vvWNeEnT:xi/CAmYFIHskAREFpdKOMAxn6Bm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 872a2c7edbb29d00e46661a1290d6a47_JaffaCakes118
Files
-
872a2c7edbb29d00e46661a1290d6a47_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 23KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE