Static task
static1
Behavioral task
behavioral1
Sample
eab7d0d533d1c1c8257e8a149ced2ee1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
eab7d0d533d1c1c8257e8a149ced2ee1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eab7d0d533d1c1c8257e8a149ced2ee1_JaffaCakes118
-
Size
360KB
-
MD5
eab7d0d533d1c1c8257e8a149ced2ee1
-
SHA1
60d741b6734cb3c63c1b7cbf3bcd4da1e20f8392
-
SHA256
6a05f46276ef92706af3a031d18bc255e019591225557ff9181c15366d2d8ba6
-
SHA512
9e27ec72ae0afcd650366ad8c07a1061d08442a926c4dcc8b528e96ed8be194c4104befb70ac5704b4fb2f860dd48c41be40953536c14060bc6c5db39b11254e
-
SSDEEP
6144:hlSxHPFhJlSxHPFhJlSxHPFhJlSxHPFhJlSxHPFhJlSxHPFhJlSxHPFhJlSxHPF5:hmvFhJmvFhJmvFhJmvFhJmvFhJmvFhJR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eab7d0d533d1c1c8257e8a149ced2ee1_JaffaCakes118
Files
-
eab7d0d533d1c1c8257e8a149ced2ee1_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 31KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE