Static task
static1
Behavioral task
behavioral1
Sample
bdf4481e2130522f2a2301ab8c238fbb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bdf4481e2130522f2a2301ab8c238fbb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bdf4481e2130522f2a2301ab8c238fbb_JaffaCakes118
-
Size
211KB
-
MD5
bdf4481e2130522f2a2301ab8c238fbb
-
SHA1
8f1f77bf6770918b566ac79a5ea009096d501e48
-
SHA256
bc5f0a28475efca6b09d099c91662b3aafba140dde4a5c36851ac3217e603f4c
-
SHA512
87fca2dc5e1d2bfd43f75a16db00842e79d66ab06f36bb370c8be158680c46a51cb5a50d6bcb288b063fd6ccabe19ae6dc4ad529547d3669454c9c34e82c7b22
-
SSDEEP
3072:9k2+LfWgO0xdH4Cjv+tcgBO3jKjOMFwEQIN3C9ISE0qJiNlUdpnlt:G2ngLdH4CHjKjOMFwEQISzqJBpnlt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdf4481e2130522f2a2301ab8c238fbb_JaffaCakes118
Files
-
bdf4481e2130522f2a2301ab8c238fbb_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 86KB - Virtual size: 576KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE