Static task
static1
Behavioral task
behavioral1
Sample
b523d7c871d772a070bb92ca97cbe199_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b523d7c871d772a070bb92ca97cbe199_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b523d7c871d772a070bb92ca97cbe199_JaffaCakes118
-
Size
24KB
-
MD5
b523d7c871d772a070bb92ca97cbe199
-
SHA1
0572587fd89d7fb03dee6d65cf888c47005ca984
-
SHA256
4bc5f150c67ee8ea7188010ba5775d6e1087a70b574eda99551f66bc1c1be207
-
SHA512
8bf818d7b24a1bfbb135cb3754a156af17d32d392d4b811424b2b8813f4132d360f23ab3e53557fa6db761494a24b7c8d41cc31edce8ce5f56d923b6d5705f4d
-
SSDEEP
384:jmYX5K6v4Gprye3R1lZs7hBFXjEnR1HCUsEKHXbOBGN21/qtUuLJy4oq//0:jZK6dr2lBdgRBx1KHXbUd1YxJy4d/s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b523d7c871d772a070bb92ca97cbe199_JaffaCakes118
Files
-
b523d7c871d772a070bb92ca97cbe199_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 14KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE