Static task
static1
Behavioral task
behavioral1
Sample
03ee31d2355abb898b1c377e289de3c1_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
03ee31d2355abb898b1c377e289de3c1_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
03ee31d2355abb898b1c377e289de3c1_JaffaCakes118
-
Size
150KB
-
MD5
03ee31d2355abb898b1c377e289de3c1
-
SHA1
fc38c19136af6c6a576ac749401f38cb6dbacd03
-
SHA256
051c8df126f5c305fe15e2d1b28a581cb4e1499d801b948264314d3d2e42952c
-
SHA512
fe70c85f7b404efcb7e97e334316efeb1e65a3ce35519e19fc9ecec449a2bf3efb213e94145a1547bb95224afaaa00de0f553c459470a58622c196e2fb059446
-
SSDEEP
3072:ksM8IdfPbE3cdvEy+DnUBHVKKe4VlB3sKvY0G995YudKkiVfrl+GcfMoV7:kffjEmvEy+DnUBH3O3KA7I+Gcb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03ee31d2355abb898b1c377e289de3c1_JaffaCakes118
Files
-
03ee31d2355abb898b1c377e289de3c1_JaffaCakes118.exe windows:5 windows x86 arch:x86
ca10cd7984639785ad518132dce1115e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
ole32
CoInitialize
advapi32
FreeSid
netapi32
NetApiBufferFree
shell32
SHGetMalloc
oleaut32
SysFreeString
shlwapi
SHGetValueW
Sections
.MPRESS1 Size: 144KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE