Static task
static1
Behavioral task
behavioral1
Sample
ec13904b885b9cbf171b7e94ad9b23c4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ec13904b885b9cbf171b7e94ad9b23c4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ec13904b885b9cbf171b7e94ad9b23c4_JaffaCakes118
-
Size
55KB
-
MD5
ec13904b885b9cbf171b7e94ad9b23c4
-
SHA1
4c37e6af6e4f8fb585cbb7a0f5736f0b80338865
-
SHA256
cded3b511b5acf91e786936de736b9a64e79592ee6433edd6daa3b40fff5806f
-
SHA512
1ee22fda26427306d732ec464dbf411684f04a449a9c883cf647830292345168a9ab36eec1b04b415339947f083d29ddaef74f905e5b63fd5be7cb3b7d6e5597
-
SSDEEP
768:uiRVZwlephZYNuRrIKM/GsNEpFjEf8o688PUQ0Zbnwzoxz5FhVkdvDyRi8+ly:1RAephXq/hxf36JUjZhxdFhKdvcH+M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec13904b885b9cbf171b7e94ad9b23c4_JaffaCakes118
Files
-
ec13904b885b9cbf171b7e94ad9b23c4_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 35KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE