Static task
static1
Behavioral task
behavioral1
Sample
969e7f11955c869c7afa3ec0dc3bc0e1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
969e7f11955c869c7afa3ec0dc3bc0e1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
969e7f11955c869c7afa3ec0dc3bc0e1_JaffaCakes118
-
Size
64KB
-
MD5
969e7f11955c869c7afa3ec0dc3bc0e1
-
SHA1
f2aad4e20703c2975cd156d7f6aa49003b39fb87
-
SHA256
5c071fb8b77570ca4bace220b48358f691e4b9d3e791779ab8a1330bac53deeb
-
SHA512
f8f9bf4f61852868714043a480658117739c3027f18aeb8b6a077f3a4317047fe9e5d0f1b8df8453bc59f50e376d6cdc21658f0b894fa79f54c172c0e736642a
-
SSDEEP
1536:vmL/ODyx+/DZZoKl5TvvYkP9fQQ57lDElNOkg+K:Od+/DLoUTnYgKQLn7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 969e7f11955c869c7afa3ec0dc3bc0e1_JaffaCakes118
Files
-
969e7f11955c869c7afa3ec0dc3bc0e1_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 44KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE