Static task
static1
Behavioral task
behavioral1
Sample
fdb180854e022696e55ec059c5c8ad50_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fdb180854e022696e55ec059c5c8ad50_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fdb180854e022696e55ec059c5c8ad50_JaffaCakes118
-
Size
16KB
-
MD5
fdb180854e022696e55ec059c5c8ad50
-
SHA1
bb367a50a89e57b0d23f41f8653b8c08b7716a71
-
SHA256
e2cc1453d75b58142bf78aea7c48b575950b084012aea9217bd2d5c9ad9ea34b
-
SHA512
749c3785374f9bae7d092f754360a423c3688c85fb4334dbb3897516e9e813b79c96679188d50f12a6430652ee3193e9418698f24063783845481d06b08fd82c
-
SSDEEP
384:GjywvG0kNYBm8bK6z9/dHCznYddX3e2C0US6AyY5UUHRb9idenA:GY0AibK6RQzYP3i0xykxbAWA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdb180854e022696e55ec059c5c8ad50_JaffaCakes118
Files
-
fdb180854e022696e55ec059c5c8ad50_JaffaCakes118.exe windows:5 windows x86 arch:x86
3af3eabc24a8aeabb57fd851189b390e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
mscoree
CorBindToRuntimeEx
user32
MessageBoxA
oleaut32
SafeArrayUnlock
Sections
.text Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE