Static task
static1
Behavioral task
behavioral1
Sample
ce3f6f2beb02c82a91bfa99f212583ef_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ce3f6f2beb02c82a91bfa99f212583ef_JaffaCakes118
-
Size
1.0MB
-
MD5
ce3f6f2beb02c82a91bfa99f212583ef
-
SHA1
a82d4de60a7179da095b604bc2fe335aff3979ec
-
SHA256
4e43aac546c2a36e68403d3af2bdbd88584f36cb1161f864c215e9470d5095d5
-
SHA512
0b92f86f76dde3906930b9047211c33d76cb6785de80881f83142fd29c463391ac76b5d8f21ab22f998930bb4c91404b92c0506128d22a65e557fa1732d70734
-
SSDEEP
12288:oZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZkZJ:ommmmmmmmmmmmmmmmmmmmmmmmmmmr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce3f6f2beb02c82a91bfa99f212583ef_JaffaCakes118
Files
-
ce3f6f2beb02c82a91bfa99f212583ef_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 33KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE