Static task
static1
Behavioral task
behavioral1
Sample
fc59a42f3f3cac873ad6d3ac619cd456_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc59a42f3f3cac873ad6d3ac619cd456_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc59a42f3f3cac873ad6d3ac619cd456_JaffaCakes118
-
Size
38KB
-
MD5
fc59a42f3f3cac873ad6d3ac619cd456
-
SHA1
3e5b38a24e004e7e897b5ff5a8e5b7fbc581e4aa
-
SHA256
75517e3510b76dbcbeae815befe7ae52d785f97ae8c3b3ba953347c8f12cf43c
-
SHA512
390aa3d1c30ea3e309d231722c4a2105708ad450184da93212fb074d3a41be839679e39f57c799ba222bbd9911767cb71fc13f00d86bf8e2bd17dbb375c752fb
-
SSDEEP
384:5IEjBheiT/n5Na5upWZnkDra+/To0hESFzpYzlcEebirpcsjYNEUIVbfgan6+may:thz77+/ka+v/ilxpc0/ZTnn6++O5DdT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc59a42f3f3cac873ad6d3ac619cd456_JaffaCakes118
Files
-
fc59a42f3f3cac873ad6d3ac619cd456_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 17KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE