Static task
static1
Behavioral task
behavioral1
Sample
6632d44ed976959f38a5405727cade95_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6632d44ed976959f38a5405727cade95_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6632d44ed976959f38a5405727cade95_JaffaCakes118
-
Size
437KB
-
MD5
6632d44ed976959f38a5405727cade95
-
SHA1
be4837a07ea6f5d961d18d5e2f4c069d4f4e5616
-
SHA256
5e99f18cfda3acc86d27e66ea11bef98cda951011baf8eff0f696af65f3ccdfe
-
SHA512
15c2cdff9448ad156024f2e60a547b15d470b8692d2159efec0d4feb6e68bedd5d79d73a59b32f10231b33fa6e0c0052856e59835264eb88a4f433c37a83dbdb
-
SSDEEP
12288:KCDJ7e26HUABFq/yuKN3kmpqFaMH1N98Jf6P6AuTk5:KCDJS2OAnKN3PpSaMH178J26AH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6632d44ed976959f38a5405727cade95_JaffaCakes118
Files
-
6632d44ed976959f38a5405727cade95_JaffaCakes118.exe windows:5 windows x86 arch:x86
3af3eabc24a8aeabb57fd851189b390e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
mscoree
CorBindToRuntimeEx
user32
MessageBoxA
oleaut32
SafeArrayUnlock
Sections
.text Size: 3KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE