Static task
static1
Behavioral task
behavioral1
Sample
8893ae742f790d13b164ccb70bb9cb80_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8893ae742f790d13b164ccb70bb9cb80_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8893ae742f790d13b164ccb70bb9cb80_JaffaCakes118
-
Size
64KB
-
MD5
8893ae742f790d13b164ccb70bb9cb80
-
SHA1
0e8a3a23d7c3dce4a499a6791ee88d3c344294f7
-
SHA256
fe69d67efa3b3f1a632f9dc5259c0043bae4ce3c09d22faa2b3901dd5be15552
-
SHA512
e9735d10073c3dfdddd8d8578ba8229584c25586c98c6306e8453daecc69b2ac05e090ace0e424c0d695298d399cf4815056c248fea9f4198823c3751517edb5
-
SSDEEP
1536:ybC0xJ7tAFZO9HBwwjrj12fEA0BDFeSxI7v+o:yBuFZO3wwXjgf1mfxI3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8893ae742f790d13b164ccb70bb9cb80_JaffaCakes118
Files
-
8893ae742f790d13b164ccb70bb9cb80_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 44KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE