Static task
static1
Behavioral task
behavioral1
Sample
529588a833c99920c62fd386cc848779_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
529588a833c99920c62fd386cc848779_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
529588a833c99920c62fd386cc848779_JaffaCakes118
-
Size
21KB
-
MD5
529588a833c99920c62fd386cc848779
-
SHA1
d24066770c50e0c7d87a033e73e46bf57a92aead
-
SHA256
6485bdb784afd0f53b9a2e5cca711092e672b4c258b4870632a4233c5075533d
-
SHA512
4a759cb9be1fc4be21a4db58049cd20d7d279beff4aff116ca2012cbb7db50c73744f04b4cc1d5880867734411b0e274cd3f2d0658bd9c901723d932617836d9
-
SSDEEP
384:5HuIy2cWS4mWY295DY3gGfwCMmSVhQQFdRpgbxHEUNOl:5unyQe+wIx3Cdg1i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 529588a833c99920c62fd386cc848779_JaffaCakes118
Files
-
529588a833c99920c62fd386cc848779_JaffaCakes118.exe windows:4 windows x86 arch:x86
3b1bccf9fe9bb7fb71272ecda3d097d4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlAddAccessAllowedObjectAce
NtAllocateVirtualMemory
NtQueryDirectoryFile
RtlAdjustPrivilege
rtutils
TraceDumpExA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE