Static task
static1
Behavioral task
behavioral1
Sample
e19bd48c01a91aa26d2ee77d6b4b8305_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e19bd48c01a91aa26d2ee77d6b4b8305_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e19bd48c01a91aa26d2ee77d6b4b8305_JaffaCakes118
-
Size
57KB
-
MD5
e19bd48c01a91aa26d2ee77d6b4b8305
-
SHA1
afbd2e6a70e7a22e94ad10b3b3bd687dd0b2e7e3
-
SHA256
d1a70905ae79aefeaf5105e93553b57cee077e8101c60e9ee045c5d450ee69ee
-
SHA512
6014c4284321d02bda71e67275c9e78e0734750dce8d267df3f20425549d0112a867e974df8f07980fb05ed5249dbd1ba93011dc8ee7aec7747af87428d61fde
-
SSDEEP
1536:ECM6Ys4njatv0ubeMFrQYRKz4ka5QGdKxY:ECsDWzeurQSKz4kauGdKY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e19bd48c01a91aa26d2ee77d6b4b8305_JaffaCakes118
Files
-
e19bd48c01a91aa26d2ee77d6b4b8305_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 47KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE