Static task
static1
Behavioral task
behavioral1
Sample
114fdf198aa69f5c73f96f46b4120ed3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
114fdf198aa69f5c73f96f46b4120ed3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
114fdf198aa69f5c73f96f46b4120ed3_JaffaCakes118
-
Size
74KB
-
MD5
114fdf198aa69f5c73f96f46b4120ed3
-
SHA1
7f6fd92557818fca6655c8ebaf1a3d4f92e97bb3
-
SHA256
ae0ccf18cc7f8980400909d254a8cbc278b60ecb72bda8a70c3de51033870c5d
-
SHA512
77245476cc05c9ca3259e6792c5d9e2cb025644ac7e69ef7b8ac72b096d6f444a5412d455a782572b824997c2cc7f9512f074b95566c622d20d19dba55b872f6
-
SSDEEP
768:3jlYwktHb04wU9zJ0jhQSdGnBmn7uh7QoumK4qHtRS7qKZIyC+mmiJTK3h0S+WAZ:TWwWAKE1AnBYqkm3QWXCmCTK3mSq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 114fdf198aa69f5c73f96f46b4120ed3_JaffaCakes118
Files
-
114fdf198aa69f5c73f96f46b4120ed3_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 54KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MCTeam Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE