Static task
static1
Behavioral task
behavioral1
Sample
fa7c2a3575eb04598c9d0ad5a93f5fc8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa7c2a3575eb04598c9d0ad5a93f5fc8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa7c2a3575eb04598c9d0ad5a93f5fc8_JaffaCakes118
-
Size
106KB
-
MD5
fa7c2a3575eb04598c9d0ad5a93f5fc8
-
SHA1
ac76db98f1ca4f002b7c39a075a525601933bf2d
-
SHA256
42bd3d25e18b36fd5556eebdd066a83ce321d8448c24a7e2e9d6fc17f7f8d2c9
-
SHA512
09e93302ad033ff0bd636faeffc8cdd873b71244370ed7a76f28db3f2d15ccf6b9d41f6d628ac485969330b2c7de9b9ca1c78da61a73e35218b98ebf0a2a23cb
-
SSDEEP
3072:ZXnsAqsJf5zMVrVcm2XXoQ/xf1eAPtKg/kNwjB5hRRA:lsDskVxcmGXokx1eWtp5hnA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa7c2a3575eb04598c9d0ad5a93f5fc8_JaffaCakes118
Files
-
fa7c2a3575eb04598c9d0ad5a93f5fc8_JaffaCakes118.exe windows:5 windows x86 arch:x86
3af3eabc24a8aeabb57fd851189b390e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
mscoree
CorBindToRuntimeEx
user32
MessageBoxA
oleaut32
SafeArrayUnlock
Sections
.text Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE