Static task
static1
Behavioral task
behavioral1
Sample
f9ee75931da1a0db850952db23284481_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9ee75931da1a0db850952db23284481_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9ee75931da1a0db850952db23284481_JaffaCakes118
-
Size
44KB
-
MD5
f9ee75931da1a0db850952db23284481
-
SHA1
aba04f9d25398cff47197a2140cb65abb4c66ab6
-
SHA256
9a8d81ef72581b8c2c4549b20ce7eb0cdcdfa8154bf61f23ea677a3ea015fbc1
-
SHA512
57f51298f6ae8a4ac798fcb6fd4d5502791e0fde86de31e47dcba2e4fd56e73de791fd43786351ec47b784bdae5d4bd09c584ed3672317719659ac70f2367d22
-
SSDEEP
768:eBZSmCnYfSr5asau+n68/Uo0qNC8rL1d90HfNhyP1/ZbOl8ANVV:eBJCY6ssau+n6TCrrp01hWIllV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9ee75931da1a0db850952db23284481_JaffaCakes118
Files
-
f9ee75931da1a0db850952db23284481_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 39KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE