Static task
static1
Behavioral task
behavioral1
Sample
c89d9bed718b850b823e01c56f220e73_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c89d9bed718b850b823e01c56f220e73_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c89d9bed718b850b823e01c56f220e73_JaffaCakes118
-
Size
43KB
-
MD5
c89d9bed718b850b823e01c56f220e73
-
SHA1
91c394c23dad7d3a3c81d20af8dc14f63143dbc1
-
SHA256
87e9e0e7e11db56be7ed17791a57e80cbef19095250a21f23f6863b7aff23889
-
SHA512
b0c4a7bb31b465d14713237022e8c19ad665908670a69821b57720c1cd095fb9dd8aa4a4447c4cd2d2b1adb8db634e79c3b3d9244d76bf619adc0ca9ef39000f
-
SSDEEP
768:GN0ADkDQmfx5HeIP2vjuTi142oqM5/DZw72ND6FhdV8pO6akb:eTDkDQmfxleIP2uTi142jMo7CD6Fh8Oe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c89d9bed718b850b823e01c56f220e73_JaffaCakes118
Files
-
c89d9bed718b850b823e01c56f220e73_JaffaCakes118.exe windows:5 windows x86 arch:x86
3af3eabc24a8aeabb57fd851189b390e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
mscoree
CorBindToRuntimeEx
user32
MessageBoxA
oleaut32
SafeArrayUnlock
Sections
.text Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE