Static task
static1
Behavioral task
behavioral1
Sample
0002236e4cbbd7923a9a4fa40cebaf62_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0002236e4cbbd7923a9a4fa40cebaf62_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
0002236e4cbbd7923a9a4fa40cebaf62_JaffaCakes118
-
Size
34KB
-
MD5
0002236e4cbbd7923a9a4fa40cebaf62
-
SHA1
7baa7417881f11a97ecbfeae9ba572ced8daa23c
-
SHA256
14bf07e5646d64286628c3e4910054963982c25b9a572f0652a700f1a2ee9d95
-
SHA512
c79730ce80a33e23b4a380102cd3a7acbbbfac4ede0004b06735989770666c48161e17c0d6be57719608b24d6a05558a22d5f77112b55a7604998a95f7bffc0b
-
SSDEEP
768:VgBQpRSHTTR7PY4St25eixObfUFi9nNHoTf+pxRS4p1L60UQ7D:HpSTTRbxSt25eixLmpxRXL6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0002236e4cbbd7923a9a4fa40cebaf62_JaffaCakes118
Files
-
0002236e4cbbd7923a9a4fa40cebaf62_JaffaCakes118.exe windows:6 windows x86 arch:x86
36ee40a11e522db3f37399e51f99f71f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
wsprintfW
advapi32
SystemFunction036
Sections
.MPRESS1 Size: 29KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE