Static task
static1
Behavioral task
behavioral1
Sample
d2332727a816e746ca75710cc2ed2eec_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d2332727a816e746ca75710cc2ed2eec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2332727a816e746ca75710cc2ed2eec_JaffaCakes118
-
Size
57KB
-
MD5
d2332727a816e746ca75710cc2ed2eec
-
SHA1
f6465c4ef92df25c121a213e950d9348a1769889
-
SHA256
e3abebd3ee355613b8774d0b8388d8c615d708a6ae50b4518fbb52ab0712cd3e
-
SHA512
87abfddbd1b2347cf1462e0ac51d7933679a295aacff35a146843935d98a67ab3ca3025f880c8835e28fda3d1807bdb943bf28340dba2f9dfa16329b79d49f10
-
SSDEEP
1536:raLphh4px/GaOsXDp1CbVZn+K5mayAMIk:rIphho/1OOTNSk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2332727a816e746ca75710cc2ed2eec_JaffaCakes118
Files
-
d2332727a816e746ca75710cc2ed2eec_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 47KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE