Static task
static1
Behavioral task
behavioral1
Sample
641765c18040b52233072956c36d90b9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
641765c18040b52233072956c36d90b9_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
641765c18040b52233072956c36d90b9_JaffaCakes118
-
Size
283KB
-
MD5
641765c18040b52233072956c36d90b9
-
SHA1
53e6228caee4647fdb80baaffcf5887f89772c27
-
SHA256
ac17e5e7ab1e8ca929c6f914d823f9ba815156024da42b504be6a3dc301ca38d
-
SHA512
d2b66badaffe747ab0e49d1e84b9acefc90b36d5751138ae8e71fd1f462da020bed8ecbf60ff2a7194901233f17a80177eb0c0d710564659812258c2132a7e09
-
SSDEEP
6144:8wR5za+HqlckLlSNb8uBaKxW6cG+GF6nTg24Yg:TR5zaoMckLMNGKxW6L+GFwTgv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 641765c18040b52233072956c36d90b9_JaffaCakes118
Files
-
641765c18040b52233072956c36d90b9_JaffaCakes118.exe windows:5 windows x86 arch:x86
8ffc31bccd11f7f873be952d93bdc291
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegOpenKeyExW
oleaut32
SysAllocStringLen
mscoree
CorBindToRuntimeEx
Sections
.text Size: 240KB - Virtual size: 788KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE