Static task
static1
Behavioral task
behavioral1
Sample
b39988048cac938f0fecc03a340a2099_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b39988048cac938f0fecc03a340a2099_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b39988048cac938f0fecc03a340a2099_JaffaCakes118
-
Size
535KB
-
MD5
b39988048cac938f0fecc03a340a2099
-
SHA1
b8367ba9a1fb74719999a3a19de428df5cb34a99
-
SHA256
dd289b14d64f34abf5b75e39d27864ec6e0e6998126896cebaaee13f3a7b1292
-
SHA512
66c7880c89876c4d3abb198e19c283ca38a31d1f3b5e0c74e3213aefec10d50aaab2d750fa272a5a895dc3125ecd42b9e858e5045b241ac4855950d71db6b2ad
-
SSDEEP
12288:RprxVgxcVENA48Lt5WUDiZWESdJJE8olInNiAOSnCEmdnTmryP:Rb+kE6z2UrTFnAAOCjmdTmr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b39988048cac938f0fecc03a340a2099_JaffaCakes118
Files
-
b39988048cac938f0fecc03a340a2099_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 527KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE