Static task
static1
Behavioral task
behavioral1
Sample
f60970fb3d1f10d099eac001718e08fb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f60970fb3d1f10d099eac001718e08fb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f60970fb3d1f10d099eac001718e08fb_JaffaCakes118
-
Size
173KB
-
MD5
f60970fb3d1f10d099eac001718e08fb
-
SHA1
5a7a9e2e5806fac2a23494e96479b2b53f833bd4
-
SHA256
5ed7381bf1dd700f90ab72ff68765922770af6c1dc2cd897c2990526ebf4af9c
-
SHA512
f215ed5c2556dac8c0909fbf87a51d817e2bcfe319b3288c76d08cb9174c3545521c3c2667ce4caf87128b5e1418903f2f51998db29baa8c3a07c125b8209aea
-
SSDEEP
3072:D1JJ1iK7KtzdN0gSzDVoBwCkUMy/+Sj8xHVhOBwdXO+K0JLq1YvBRJZqHHJb:D1j8K7uJ+nDVjFU9W88xHzOyJTZqSlZK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f60970fb3d1f10d099eac001718e08fb_JaffaCakes118
Files
-
f60970fb3d1f10d099eac001718e08fb_JaffaCakes118.exe windows:5 windows x86 arch:x86
3af3eabc24a8aeabb57fd851189b390e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
mscoree
CorBindToRuntimeEx
user32
MessageBoxA
oleaut32
SafeArrayUnlock
Sections
.text Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE