Static task
static1
Behavioral task
behavioral1
Sample
dc372e5c6abd319094a34d816b311c5e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc372e5c6abd319094a34d816b311c5e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc372e5c6abd319094a34d816b311c5e_JaffaCakes118
-
Size
56KB
-
MD5
dc372e5c6abd319094a34d816b311c5e
-
SHA1
9aee87a5929d1177ac0b0244c77b4ee740ef0cfe
-
SHA256
23e63418f5c5ae5e74d0fcc1af23880908ffd591872cd1f70e0fa100328bf15c
-
SHA512
455e74c5f4f523460e77bf3ced78116fdd3eba4a4090c470727583d964fa0416de059ad677a1a9dbcd61b28dd0fcaf9c6419ecd0f09b6f14870d49a2c33047eb
-
SSDEEP
768:ALVCcIU7Wd8ofnpBOnsonjSy2ais48lEvC1Sr6QIcVuFuD4xYUgNphsUMUI1J4l6:ALVCc3Wd8EBOhjAskpGQzVCzgjuJWtc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc372e5c6abd319094a34d816b311c5e_JaffaCakes118
Files
-
dc372e5c6abd319094a34d816b311c5e_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 52KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE