Static task
static1
Behavioral task
behavioral1
Sample
b3cdd9bea2316e73262afba3901b2a71_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b3cdd9bea2316e73262afba3901b2a71_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3cdd9bea2316e73262afba3901b2a71_JaffaCakes118
-
Size
57KB
-
MD5
b3cdd9bea2316e73262afba3901b2a71
-
SHA1
ef0a16968e47236740b90e5e1a6b2edfaa35601d
-
SHA256
75a06e4d26d308d7c2f065db1a4cb60ea16c6d5288b508069df51a380494b390
-
SHA512
2a5f54796c7a7e7b5ad46270013492f09d103e2b5b6c9e799b032c8ae02772194d7c9f45fab6533a0a1e6ea080fb3c83a4210e387c0ba37624e48eb172c5ddff
-
SSDEEP
1536:lCM6Ys4njatv0ubeMFrQYRKz4ka5QGdKxp:lCsDWzeurQSKz4kauGdKp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3cdd9bea2316e73262afba3901b2a71_JaffaCakes118
Files
-
b3cdd9bea2316e73262afba3901b2a71_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 47KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE