Static task
static1
Behavioral task
behavioral1
Sample
b1e32a57a5b924a64548031cbdea7c57_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b1e32a57a5b924a64548031cbdea7c57_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b1e32a57a5b924a64548031cbdea7c57_JaffaCakes118
-
Size
64KB
-
MD5
b1e32a57a5b924a64548031cbdea7c57
-
SHA1
5f4947bd8309fa221364e693bc7fb3e49a4dd23d
-
SHA256
0b16f8ce979d584428517b35be43bbefeb3e7a55d761e543672a9404b63bd559
-
SHA512
f25c51e8b83dcbc1ea82b8ae636b23e171adff64ae4082d02a94c90ba599ebade45263afb6fd9325c0fb13b5c198ade4503056a224fc903716114759b183c9c0
-
SSDEEP
1536:vmL/ODyx+/DZZoKl5TvvYkP9fQQ57lDElNOkg+M:Od+/DLoUTnYgKQLnJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1e32a57a5b924a64548031cbdea7c57_JaffaCakes118
Files
-
b1e32a57a5b924a64548031cbdea7c57_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 44KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE