Static task
static1
Behavioral task
behavioral1
Sample
b3287b7bf30700ca2d70d6ef397772b3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b3287b7bf30700ca2d70d6ef397772b3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3287b7bf30700ca2d70d6ef397772b3_JaffaCakes118
-
Size
864B
-
MD5
b3287b7bf30700ca2d70d6ef397772b3
-
SHA1
9d5b879f7ff6e1b37b65b74891c931a4897e2a39
-
SHA256
13b00ce54d8f7c7fb82e0ac44d4abb74e82d205997f596844ab4e5bc08dcb8a2
-
SHA512
e062abb1bfb34f73aa4095c23012d1ca591cfad9ad7d5074ea22393d3ed110c8b0b4c9e73ed5942cd0633945c86082052ca6a09fbe5202b0774ac1800afe9020
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3287b7bf30700ca2d70d6ef397772b3_JaffaCakes118
Files
-
b3287b7bf30700ca2d70d6ef397772b3_JaffaCakes118.exe windows:5 windows x86 arch:x86
522e9dc85c4e185f3f3ec9bfc3d62498
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
HeapAlloc
Sections
Littrell Size: 384B - Virtual size: 370B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE