Static task
static1
Behavioral task
behavioral1
Sample
0109302a1babae84d3ecca6527c5e076_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0109302a1babae84d3ecca6527c5e076_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0109302a1babae84d3ecca6527c5e076_JaffaCakes118
-
Size
1.1MB
-
MD5
0109302a1babae84d3ecca6527c5e076
-
SHA1
e1577bd529a43509d768dd36c7758ef9d7be815a
-
SHA256
6cde7b7589cac5b2f2d822bed414c0141aa5da949911a6a48a66b406a63f279a
-
SHA512
fb1bee97e1cc49513b3c9ac1712d45690d4fcf6ee16ee4ea9bfbde08519e4b90040325c0df79dd48d1472ddf1a486c9ea05a2927b9238dbcde94567d5ef8e4a3
-
SSDEEP
24576:L3RVVVVVVVVVVVVVVVVVVVVVVVVVVVVV4:L4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0109302a1babae84d3ecca6527c5e076_JaffaCakes118
Files
-
0109302a1babae84d3ecca6527c5e076_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 31KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE