Static task
static1
Behavioral task
behavioral1
Sample
056c1913bd88dfd150d477376d3fc196_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
056c1913bd88dfd150d477376d3fc196_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
056c1913bd88dfd150d477376d3fc196_JaffaCakes118
-
Size
38KB
-
MD5
056c1913bd88dfd150d477376d3fc196
-
SHA1
968fc7cea3c5148f4af421395956c8ddc4c132e5
-
SHA256
9abd23e36290368c0f8b5f93e597f6d072d2e58235ca234ede1b3518f02242f9
-
SHA512
dfe07b0ae9958358f714d805baebfea73a6e162da7cb399891e52a8fffa05acdf034fc63289f71cdc3f0208f405285eb002e7b309b4f3116ae8276dec0acbf5b
-
SSDEEP
768:9zQZYl2t2PD1oUsR0mTB4pHv0ygMGKELmiGyCYO0yKv7XM+f17D7:9USl2t+Zts3B4pH8ygMJELmxhY7yKv7p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 056c1913bd88dfd150d477376d3fc196_JaffaCakes118
Files
-
056c1913bd88dfd150d477376d3fc196_JaffaCakes118.exe windows:4 windows x86 arch:x86
e1cdc27450c1985192276431935ba7cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
shlwapi
StrToIntExW
user32
MessageBoxW
Sections
.MPRESS1 Size: 34KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE