Static task
static1
Behavioral task
behavioral1
Sample
d08970f13726cdcbd9eb70446fde2865_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d08970f13726cdcbd9eb70446fde2865_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d08970f13726cdcbd9eb70446fde2865_JaffaCakes118
-
Size
46KB
-
MD5
d08970f13726cdcbd9eb70446fde2865
-
SHA1
f1db687cd0ba880890a02f69bb7c8df5837b80a7
-
SHA256
95923656036b62f6b67e8a50a360196c9e486df5f258fc090f0221c27ff0f772
-
SHA512
f6cf8a67fb5a2ac43c513478586870a7ee26a0cabd742db9f3d5b9fe7ea8c5f2f0d070abe2f291e3b1fd4e4c93168125da89e29ab114b941631d6947adc4ed0c
-
SSDEEP
768:9GCV6O58awRoAvZDV49ieUXgn4SSciyS1gPZ4DLPLJKr:DV/lfI1KYefnscpS1gPZ4DLDJKr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d08970f13726cdcbd9eb70446fde2865_JaffaCakes118
Files
-
d08970f13726cdcbd9eb70446fde2865_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 36KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE