Static task
static1
Behavioral task
behavioral1
Sample
f0f25739ff4bb470150f0810ce4bc331_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f0f25739ff4bb470150f0810ce4bc331_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f0f25739ff4bb470150f0810ce4bc331_JaffaCakes118
-
Size
208KB
-
MD5
f0f25739ff4bb470150f0810ce4bc331
-
SHA1
360af222ca545da8a5ce154262849c8fbd6dfe59
-
SHA256
17c95819fb83d91c1ee74f0a4e8e71464bd6d8b27ea0d30d0ce81c7c11586b1e
-
SHA512
d5b6afefb42bd6ef01882900086f22c091e9758857b31807b09f29811156b1e9ce1ae6a9b0308d69d0aedcea7c078f45f50ea595207e8090059c0fa07f4eab9c
-
SSDEEP
6144:QlGRgXm15iJViKG2gbnNZcOEaMlTuEwgzLuww5sz:Rv1xKgTNZutTuKL5w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0f25739ff4bb470150f0810ce4bc331_JaffaCakes118
Files
-
f0f25739ff4bb470150f0810ce4bc331_JaffaCakes118.exe windows:4 windows x86 arch:x86
691f1193f16065947032ace3a2329e55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
fabs
comctl32
InitCommonControls
user32
IsChild
gdi32
BitBlt
ole32
CoInitialize
shell32
ShellExecuteExA
shlwapi
PathQuoteSpacesA
Sections
.MPRESS1 Size: 203KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE