Static task
static1
Behavioral task
behavioral1
Sample
064e201bc830041fb596dee2f84cf0fb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
064e201bc830041fb596dee2f84cf0fb_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
064e201bc830041fb596dee2f84cf0fb_JaffaCakes118
-
Size
32KB
-
MD5
064e201bc830041fb596dee2f84cf0fb
-
SHA1
82ce5898903b93f907151a5c8fa7ab8dcd6d3b24
-
SHA256
8de188d0352fe17ecd80b9f45666aa7edad462a1b7ec378f54aeca393942ce9b
-
SHA512
0a7eb72f00b4985ece3683b6c29735d77986c7cf6b8ef83083a0e3382b73ff4f4a410c0c2922a8e98761bb2287f2b2aadf9dcad25072516d33bf60f25ddee6c4
-
SSDEEP
768:MyfBX4WtWv8kE6xnj1uZJ3N2B/+MealTN:Myj8xnj1uP3smMBB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 064e201bc830041fb596dee2f84cf0fb_JaffaCakes118
Files
-
064e201bc830041fb596dee2f84cf0fb_JaffaCakes118.exe windows:5 windows x86 arch:x86
4cc8d139add458350cac906b4ca9a3c6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
ole32
CoCreateInstance
CoInitialize
CoUninitialize
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE