Static task
static1
Behavioral task
behavioral1
Sample
8bee7fbb5a1f8872e78fb9e24e89a150_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8bee7fbb5a1f8872e78fb9e24e89a150_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8bee7fbb5a1f8872e78fb9e24e89a150_JaffaCakes118
-
Size
267KB
-
MD5
8bee7fbb5a1f8872e78fb9e24e89a150
-
SHA1
e203864926c4fb1abbf23d03f27aa271797c681a
-
SHA256
93be437f7f2df06f052b6a787cc74fe19a96f63b259f5126c543ffbc2523c5dc
-
SHA512
142399290f24233ca02fb02d5099126328d8f3a7db6d86e1d07083c61bc7a4d96f4edbaa55072167c8965c1c7854ebcae9337e49704da8ce895400aa74f7dbe2
-
SSDEEP
6144:c+llE7coroy3rMI/2BOK5FJ3CO2+ydu6uhfBa7dEog:plE5roI/2BzX5dyd90a7d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bee7fbb5a1f8872e78fb9e24e89a150_JaffaCakes118
Files
-
8bee7fbb5a1f8872e78fb9e24e89a150_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 250KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE