Static task
static1
Behavioral task
behavioral1
Sample
e00031a7da7744949b5b6d38863525fe_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e00031a7da7744949b5b6d38863525fe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e00031a7da7744949b5b6d38863525fe_JaffaCakes118
-
Size
317KB
-
MD5
e00031a7da7744949b5b6d38863525fe
-
SHA1
f595698268d8cfa88bea3daab3bd3b6037d44288
-
SHA256
9fc9455ac0e81fc746b29ba5c3f326fbc9bbca2a38aa8a365d33c8510b4b06c6
-
SHA512
0b69e95343bcfa0fbf88d938e6e1dde9232622b835f3ed3beb064caf1e59e59891b013539cf3f302872af96e4d4ef44197264cbbee57aa6dc38e4e844ce07b71
-
SSDEEP
6144:Zi30JcLzfJUrjhQjmMzycr1Z8Vm09RqHmaYnqQDLghhDqB9:Zi30JeSxcr1KVm03qHmaqng369
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e00031a7da7744949b5b6d38863525fe_JaffaCakes118
Files
-
e00031a7da7744949b5b6d38863525fe_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 207KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE