Static task
static1
Behavioral task
behavioral1
Sample
a82dc61f27b03cbbad361a716f0b40c7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a82dc61f27b03cbbad361a716f0b40c7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a82dc61f27b03cbbad361a716f0b40c7_JaffaCakes118
-
Size
33KB
-
MD5
a82dc61f27b03cbbad361a716f0b40c7
-
SHA1
75cef03a43adef596f64a568e5a341b69bf330b8
-
SHA256
5f990256dd6e5351b6449431c79d40a7aaab2d23fc870714015113e6bbbd7523
-
SHA512
3353b87034d8d1018e88a49ce1827f00b397b6dd8a793b84a500340e5b193d1a2cf639bcb8ff1939805f084917aaf852a028e6409774806fe2a9c0284b5f2bc4
-
SSDEEP
768:B4URzUjUI/znSxATOj21M8kMKfpp3Rs4pJ:iURzW/uqTs8kpRRs4r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a82dc61f27b03cbbad361a716f0b40c7_JaffaCakes118
Files
-
a82dc61f27b03cbbad361a716f0b40c7_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 23KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE