Static task
static1
Behavioral task
behavioral1
Sample
003cab65c7ce3c4d19a54c76302acdfd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
003cab65c7ce3c4d19a54c76302acdfd_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
003cab65c7ce3c4d19a54c76302acdfd_JaffaCakes118
-
Size
578KB
-
MD5
003cab65c7ce3c4d19a54c76302acdfd
-
SHA1
e54c1f8d6919fc7f3260e424fda2275addc04a44
-
SHA256
da5a34792bb43829ec9ce8deb73d14abfb1f9deb0d75a1011a9849f7128854b1
-
SHA512
1b3022dbe340b5d4ac8f499de8b16ff2fe0774dc3620f748ce7280a1d1f73900d29de12cb0e65d35fab3eb5b277c55385f431c1cebc6c82900337f6ee994863c
-
SSDEEP
12288:+Au/6WxcSrMsyuOdFPPwzrTAZRvoYAeLUtfvyG1AjO:+VRxc0SRdFnwzrTAfvoYbLUFvhAi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 003cab65c7ce3c4d19a54c76302acdfd_JaffaCakes118
Files
-
003cab65c7ce3c4d19a54c76302acdfd_JaffaCakes118.exe windows:5 windows x86 arch:x86
595061c541a06f52736591c3f5078a82
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
version
VerQueryValueW
comctl32
ord17
user32
GetDC
gdi32
SaveDC
advapi32
FreeSid
shell32
ord165
ole32
CoInitialize
oleaut32
VariantInit
shlwapi
PathFileExistsW
gdiplus
GdipFree
ws2_32
send
winhttp
WinHttpOpen
iphlpapi
GetAdaptersAddresses
dbghelp
MiniDumpWriteDump
Sections
.MPRESS1 Size: 367KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE