Static task
static1
Behavioral task
behavioral1
Sample
d3c2fbb8466f747bb6f72d5b0cdaf981_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3c2fbb8466f747bb6f72d5b0cdaf981_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3c2fbb8466f747bb6f72d5b0cdaf981_JaffaCakes118
-
Size
334KB
-
MD5
d3c2fbb8466f747bb6f72d5b0cdaf981
-
SHA1
d3735d8e4ba13c79019c3e8e5dfc887734a79d71
-
SHA256
132079b57b94dffb159863839641ae11d229fe10bc2c50157668e1314ef814db
-
SHA512
fa1b3819006baebbb9bf06a6422c0fa34b42a5e4ccf30a260d4d981b666a31820baa3a05fd97ae3fa59fd652a4f140db1d4d4da02caac079a1ef8184cb33df37
-
SSDEEP
6144:+9xaFDR3J2ulCwl2Pe7rViy/Z/doMGrhl69wZ6CcIfA28yyMfgZaJBG9:mkN3MOe2Vi+Z+k9wZ6CRfyyykN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3c2fbb8466f747bb6f72d5b0cdaf981_JaffaCakes118
Files
-
d3c2fbb8466f747bb6f72d5b0cdaf981_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 312KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdatar Size: 11KB - Virtual size: 11KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE