Static task
static1
Behavioral task
behavioral1
Sample
dab032fc9ed2e3891892b5c14218ee14_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dab032fc9ed2e3891892b5c14218ee14_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dab032fc9ed2e3891892b5c14218ee14_JaffaCakes118
-
Size
245KB
-
MD5
dab032fc9ed2e3891892b5c14218ee14
-
SHA1
60c4f40e27b6cdd756f14e3c78552553d037ca5c
-
SHA256
197a50280dbc30ea5f87c62dd93136e28b74d05f856cf4b227b08cc2b73458f0
-
SHA512
b952b10fd6aaa0f54834dd84d62230a9cdb5bbe0b9323187993a6128fb9a4062da484704f6682ef72fb3f7aff8acf694ead8382c474b9e8edaa05d7cdce4d58c
-
SSDEEP
6144:S2GNWaEo1xK1INa4rzfjEHgVLtXLzmnHVQooVGM84dInOD3BPSEF:7aLSLEf6g9tXLqnioo984N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dab032fc9ed2e3891892b5c14218ee14_JaffaCakes118
Files
-
dab032fc9ed2e3891892b5c14218ee14_JaffaCakes118.exe windows:5 windows x86 arch:x86
3dcfa8ad909f34afad929ca25ba593c8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualQuery
VirtualFree
GetProcAddress
VirtualAlloc
LoadLibraryA
GetModuleHandleA
VirtualProtect
HeapAlloc
HeapFree
GetProcessHeap
Sections
.MyPack0 Size: - Virtual size: 570KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MyPack1 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MyPack2 Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ