Static task
static1
Behavioral task
behavioral1
Sample
00a63ae91c572b06ead2a1fe92c5bf10_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
00a63ae91c572b06ead2a1fe92c5bf10_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
00a63ae91c572b06ead2a1fe92c5bf10_JaffaCakes118
-
Size
32KB
-
MD5
00a63ae91c572b06ead2a1fe92c5bf10
-
SHA1
9c559150f3c8c5e3e282d8856f2f62a348bf355a
-
SHA256
48a6b817ec5478e46f43a385d2f0f002cac46fcc734134b076f138523837d470
-
SHA512
0b504deaf0876bd60275e181835a2510eaa61866b3eac895d82cd175205334ae1cf399cc01a8fb9b642074441d148ddfaf7108da3018bacac6006ad7f75a4d68
-
SSDEEP
768:IPXIudMTufNpg6LAoNIJOVfgVIMOUkdr:IPX9MTulpHLAOCOU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00a63ae91c572b06ead2a1fe92c5bf10_JaffaCakes118
Files
-
00a63ae91c572b06ead2a1fe92c5bf10_JaffaCakes118.exe windows:5 windows x86 arch:x86
4cc8d139add458350cac906b4ca9a3c6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
ole32
CoCreateInstance
CoInitialize
CoUninitialize
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE