Static task
static1
Behavioral task
behavioral1
Sample
d0b17246bc850fc3836a7a212e465de4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0b17246bc850fc3836a7a212e465de4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0b17246bc850fc3836a7a212e465de4_JaffaCakes118
-
Size
624KB
-
MD5
d0b17246bc850fc3836a7a212e465de4
-
SHA1
07d07d3a9143d22ca41234461ea633b14f2ff75d
-
SHA256
205cb4608f0cf24d01c5a93fdaffea329dfec5f827454a5e621c1484b0d12e72
-
SHA512
35e0d39299d7032a6603e0813c2d9cf5390a2c92b6a7e00e32d671e08449c76f7dcdfef3c464148dcfe878a3bf9f01dc8c047ceadf78d8b687596190c320f608
-
SSDEEP
6144:0BaZA6AM5tm1BS4i4jARHKhyFxQZZxbUP10glX1W5YesP9bZGgtCS+in:0cA6SbVi42BFx8dUP1fBeshYgtCS+i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0b17246bc850fc3836a7a212e465de4_JaffaCakes118
Files
-
d0b17246bc850fc3836a7a212e465de4_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 205KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE