Static task
static1
Behavioral task
behavioral1
Sample
a223c945680ea29d0f1f0e5f0a02e603_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a223c945680ea29d0f1f0e5f0a02e603_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a223c945680ea29d0f1f0e5f0a02e603_JaffaCakes118
-
Size
64KB
-
MD5
a223c945680ea29d0f1f0e5f0a02e603
-
SHA1
4eab7ca5611ec994b5a8199eed59991f8529e3b4
-
SHA256
71fee3aa1e62318da30a29142c6e1f9e9f5296100abda49cb0d939798e8f2f7c
-
SHA512
383aec900f7371900a1e680123bc2d86bfd560847bef2423c0d72418292b8cf40dc50c8ca20a5f8afb32ec21a2ee83cac2e3df1510c06122403c6b4df9a31ebb
-
SSDEEP
1536:8Q7Uv00YEHGTYZzyh9/TNtfQUgNNVNJlkcb+H:8Q70YEFzgZTNXkib
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a223c945680ea29d0f1f0e5f0a02e603_JaffaCakes118
Files
-
a223c945680ea29d0f1f0e5f0a02e603_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 44KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE