Static task
static1
Behavioral task
behavioral1
Sample
01448a15955c3e865ea122a4e397e65d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
01448a15955c3e865ea122a4e397e65d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
01448a15955c3e865ea122a4e397e65d_JaffaCakes118
-
Size
277KB
-
MD5
01448a15955c3e865ea122a4e397e65d
-
SHA1
1736935e3256028296368650d3766799628a1d4b
-
SHA256
3bd8a848f8f3d56886f13da431a36c5c21cc8114157f7860ad872dd6c305883c
-
SHA512
40c2f39da94e08371c75162f3e667d338620289f9a127a1389a7563c453856756e83ede340ee9b504eddde6e6a5c94e557b58e1d6f6689db4d5db005ad3ad76b
-
SSDEEP
6144:YWctico429ViFW1f42JiSuVyERLFt+9rKV2ux1W8HfRPt:VctTo42ziFS4bRe8V2uu8Hfz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01448a15955c3e865ea122a4e397e65d_JaffaCakes118
Files
-
01448a15955c3e865ea122a4e397e65d_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 264KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE