Static task
static1
Behavioral task
behavioral1
Sample
00f582c82bf8057dd93cac4c1edf0ba8_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
00f582c82bf8057dd93cac4c1edf0ba8_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
00f582c82bf8057dd93cac4c1edf0ba8_JaffaCakes118
-
Size
20KB
-
MD5
00f582c82bf8057dd93cac4c1edf0ba8
-
SHA1
bcf13ae25ead3d7a26c46c2620f9d541c25eca76
-
SHA256
b0d39ea0a045e8a69954b8ef35417a70738eeefbe3f6296affe391f29880d010
-
SHA512
b2b3df680138dede233cee8c398f3dbcca9d9d3a7bc6eebaed1613b07ccea8f77e8a3f041f6d10855aa3274e8da018ce067d9c16909dec31fac99f49ea973049
-
SSDEEP
384:VgrnzzO33TrRoZqDkIqRP+OKDhgnpjFvX1grxHwrdv57vvxlLOWy3W:Oj3gDrRLD4WOKDCphX1grxQrdv57Di
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00f582c82bf8057dd93cac4c1edf0ba8_JaffaCakes118
Files
-
00f582c82bf8057dd93cac4c1edf0ba8_JaffaCakes118.exe windows:6 windows x86 arch:x86
7895ee51fe81056f2a753ffaa0988cb0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
exit
certca
ord839
certenroll
ord20
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-processthreads-l1-1-2
GetStartupInfoW
api-ms-win-core-errorhandling-l1-1-1
GetLastError
api-ms-win-core-libraryloader-l1-2-0
FreeLibrary
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-2-1
GetLocalTime
api-ms-win-core-heap-l1-2-0
HeapFree
api-ms-win-core-timezone-l1-1-0
SystemTimeToFileTime
api-ms-win-core-file-l1-2-1
DeleteFileW
api-ms-win-core-datetime-l1-1-1
GetDateFormatW
api-ms-win-core-processenvironment-l1-2-0
SearchPathW
api-ms-win-core-localization-l1-2-1
GetACP
api-ms-win-core-string-l1-1-0
CompareStringW
api-ms-win-core-registry-l1-1-0
RegCloseKey
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-memory-l1-1-2
MapViewOfFile
api-ms-win-core-debug-l1-1-1
OutputDebugStringA
api-ms-win-core-kernel32-legacy-l1-1-1
FindResourceW
api-ms-win-core-heap-obsolete-l1-1-0
LocalFree
api-ms-win-core-localization-obsolete-l1-2-0
GetUserDefaultUILanguage
Sections
.MPRESS1 Size: 13KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE