Static task
static1
Behavioral task
behavioral1
Sample
82762edbcceecc53d46d76988ae4d134_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
82762edbcceecc53d46d76988ae4d134_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
82762edbcceecc53d46d76988ae4d134_JaffaCakes118
-
Size
555KB
-
MD5
82762edbcceecc53d46d76988ae4d134
-
SHA1
5c170ede2eadf2003bba8c8bd519876e044ee542
-
SHA256
e10874ab420cb32cef248f4ba9a7074268597316d813d1176580a2677e344588
-
SHA512
7c61d74a6e25fcb10bc6e51f9417f77a20583115cf6965bd7578b67fa8101db0887e24b3283ba4f74e3d58652b4eafc9e2136c8150696e493ec2735150fa0508
-
SSDEEP
6144:sBaZA6AM5tm1BS4i4jARHKhyFxQZZxbU3GABUs4r110glX1Wt10glX19CSYesP91:scA6SbVi42BFx8dU3lMB1fe1fEeshYc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82762edbcceecc53d46d76988ae4d134_JaffaCakes118
Files
-
82762edbcceecc53d46d76988ae4d134_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 205KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE