Static task
static1
Behavioral task
behavioral1
Sample
d9d77bf7323b7ee264989b2a21b75511_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9d77bf7323b7ee264989b2a21b75511_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9d77bf7323b7ee264989b2a21b75511_JaffaCakes118
-
Size
116KB
-
MD5
d9d77bf7323b7ee264989b2a21b75511
-
SHA1
187e09526d57a9f4cd11cfae39102091da6c0169
-
SHA256
7484a5b942afe57e44d46dac04a1bf1b4ab98d2948326bbecdaf2d0f0b007461
-
SHA512
70cf0aa30794f7d2fdd9e65ed6a8608112bfa0238eb38f5d2adb15130f86513907b4a12e1688b77feb6a0da592347e8b1240e4ef23dbcdf5d6f3b0ddd7494949
-
SSDEEP
3072:3lpymP4IsY8KHcHUWNTk3LLPmwBNGyvEJqv:3lpjPTgJk3LZBNGyvEJk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9d77bf7323b7ee264989b2a21b75511_JaffaCakes118
Files
-
d9d77bf7323b7ee264989b2a21b75511_JaffaCakes118.exe windows:5 windows x86 arch:x86
8ac48b52f2cc93e3789fec96b72fbb1c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
GetModuleHandleW
Sleep
ExitProcess
Sections
.text Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Jjhof, R Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Sytmu Xr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Lvfytfeq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 173B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ