Static task
static1
Behavioral task
behavioral1
Sample
9cfa41c6b657f97319b4395fe1d48dd0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9cfa41c6b657f97319b4395fe1d48dd0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
9cfa41c6b657f97319b4395fe1d48dd0_JaffaCakes118
-
Size
328KB
-
MD5
9cfa41c6b657f97319b4395fe1d48dd0
-
SHA1
0f2c0917ce2d070abd0c44212db1a20416d76630
-
SHA256
07d7ce2b0e4c31ad2fb2a97eb76a42a5d43c86581c8213e519b786caf85757b7
-
SHA512
d57100c0105d12ccc5b6bc90d9814f0e1615051d7ffd1b5236b28553754619254d7ea610e3e979b6c119ad48daf15d9202d06dfb78eb4b56938f8e85faf72c4b
-
SSDEEP
6144:eIWbEGsxdTGzTb1P6LG/J9hS14sCIFQwaEyUNxYrYBei6Cu0YD:eISEGsx68LG/J9h1sQuxYrQUCA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9cfa41c6b657f97319b4395fe1d48dd0_JaffaCakes118
Files
-
9cfa41c6b657f97319b4395fe1d48dd0_JaffaCakes118.exe windows:5 windows x86 arch:x86
8ffc31bccd11f7f873be952d93bdc291
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegOpenKeyExW
oleaut32
SysAllocStringLen
mscoree
CorBindToRuntimeEx
Sections
.text Size: 227KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE