Static task
static1
Behavioral task
behavioral1
Sample
0dd75169ace19b28be3657fba19cf52d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0dd75169ace19b28be3657fba19cf52d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0dd75169ace19b28be3657fba19cf52d_JaffaCakes118
-
Size
8KB
-
MD5
0dd75169ace19b28be3657fba19cf52d
-
SHA1
6a6e816a9e06946c860f570f812321a913e0eec1
-
SHA256
a3917513f7e7198a716b7cf785c5e7cb8554cb3bd0cec412a34ca5267f85b20d
-
SHA512
e9392c773a4c94d515c9a7c443c4baa85e00962127095d390bed348c9db5514343fca93fbb7e252c7f1fd0d01b1b7481e41375080997f8244a7309a30bc7edd1
-
SSDEEP
192:eywv9E0MqkNBKBzhARnyuX0iDVe6zmVYBE5/:eywvG0kNYBqX0EFzRS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dd75169ace19b28be3657fba19cf52d_JaffaCakes118
Files
-
0dd75169ace19b28be3657fba19cf52d_JaffaCakes118.exe windows:5 windows x86 arch:x86
3af3eabc24a8aeabb57fd851189b390e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
mscoree
CorBindToRuntimeEx
user32
MessageBoxA
oleaut32
SafeArrayUnlock
Sections
.text Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE