Static task
static1
Behavioral task
behavioral1
Sample
dcf35d1f901715b9b508dc1fa090cc9d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dcf35d1f901715b9b508dc1fa090cc9d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dcf35d1f901715b9b508dc1fa090cc9d_JaffaCakes118
-
Size
227KB
-
MD5
dcf35d1f901715b9b508dc1fa090cc9d
-
SHA1
7862ccea254d369159d705ede0f9e0e2bfd26407
-
SHA256
4e4200b0700dbf41cac2c328280fdf46915d7dc8179a840cb0391a6ec9b43d37
-
SHA512
99d9e3ec66763e5bb601d3362082ba3f3bba7c8522443f19931574c7e1382cb3b0744e30c4da11d68e7cd1f143279fa42b253cc30daded3fd56f8b8d2faa28a8
-
SSDEEP
6144:U4lwZ40243s0gJvyTZaPYZeHF/tIzi+Tk98i9goc8VRtDkYW:7n0d8PJvyQYZelVIziveo/Rta
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dcf35d1f901715b9b508dc1fa090cc9d_JaffaCakes118
Files
-
dcf35d1f901715b9b508dc1fa090cc9d_JaffaCakes118.exe windows:5 windows x86 arch:x86
8ffc31bccd11f7f873be952d93bdc291
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegOpenKeyExW
oleaut32
SysAllocStringLen
mscoree
CorBindToRuntimeEx
Sections
.text Size: 214KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE