Static task
static1
Behavioral task
behavioral1
Sample
2a3746f967ac2fa073c674001525a1f8_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2a3746f967ac2fa073c674001525a1f8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2a3746f967ac2fa073c674001525a1f8_JaffaCakes118
-
Size
670KB
-
MD5
2a3746f967ac2fa073c674001525a1f8
-
SHA1
1b7ed9a27ebc68877cd4d5649c3490034f3b10f3
-
SHA256
c61dbfd1451debf8116d9236f0ed8055046a98eb384d3a0274a98c12f60dcbf1
-
SHA512
db99b7de379eb0562a60a21f1b44fc741fa6fe864c58817d48d0bc351677b4e652225593f95a1dcbae813495bd92a4dd4cd5fe8222d7ab54ff8a1a0b0603a1b2
-
SSDEEP
12288:2y3LqOfjnZuph+oP8z5SmjYZV+lxlGXbQ68crgZbv1WZ+RGxzOvN:203nZuph38z4OY/+PN68egV06GNOV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a3746f967ac2fa073c674001525a1f8_JaffaCakes118
Files
-
2a3746f967ac2fa073c674001525a1f8_JaffaCakes118.exe windows:5 windows x86 arch:x86
3af3eabc24a8aeabb57fd851189b390e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
mscoree
CorBindToRuntimeEx
user32
MessageBoxA
oleaut32
SafeArrayUnlock
Sections
.text Size: 3KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE